Skip to content

Commit 893c02d

Browse files
committed
update mapping
1 parent 04835ba commit 893c02d

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

uncoder-core/app/translator/mappings/platforms/palo_alto_cortex/windows_registry_event.yml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,4 +28,8 @@ field_mapping:
2828
ParentIntegrityLevel: causality_actor_process_integrity_level
2929
ParentLogonId: causality_actor_process_logon_id
3030
ParentProduct: causality_actor_process_signature_product
31-
ParentCompany: causality_actor_process_signature_vendor
31+
ParentCompany: causality_actor_process_signature_vendor
32+
EventType: event_sub_type
33+
SetValue: REGISTRY_SET_VALUE
34+
DeleteValue: REGISTRY_DELETE_VALUE
35+
CreateKey: REGISTRY_CREATE_KEY

0 commit comments

Comments
 (0)