[FR] Expand Definition File Fields

[rc-csmith]

Which category is the feature part of?

• [ ] Definition File
• [x] Code/Logic Feature
• [ ] Other (please explain)

Which product is the feature part of?

• [x] All Products
• [ ] Carbon Black Response
• [ ] Carbon Black Threat Hunter
• [ ] Defender for Endpoints
• [ ] SentinelOne
• [ ] Cortex
• [ ] Other

Use Cases

Using Carbon Black Response field names, there are a lot more that can be supported based on this documentation: https://developer.carbonblack.com/resources/query_overview.pdf

Proposal

Expand supported definition files based on the list provided in the above link. Obviously not all fields necessarily need to be included but items such as crossproc or path would be useful.

Additional Context

N/A