Closed OutpostSecurity closed 3 years ago
Updated [XmlWinEventLog:Microsoft-Windows-Sysmon/Operational] to [source::XmlWinEventLog:Microsoft-Windows-Sysmon/Operational] to allow the proper setting of event_id = EventCode
Thans so much Stuart!
Updated [XmlWinEventLog:Microsoft-Windows-Sysmon/Operational] to [source::XmlWinEventLog:Microsoft-Windows-Sysmon/Operational] to allow the proper setting of event_id = EventCode