We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 04835ba commit 893c02dCopy full SHA for 893c02d
uncoder-core/app/translator/mappings/platforms/palo_alto_cortex/windows_registry_event.yml
@@ -28,4 +28,8 @@ field_mapping:
28
ParentIntegrityLevel: causality_actor_process_integrity_level
29
ParentLogonId: causality_actor_process_logon_id
30
ParentProduct: causality_actor_process_signature_product
31
- ParentCompany: causality_actor_process_signature_vendor
+ ParentCompany: causality_actor_process_signature_vendor
32
+ EventType: event_sub_type
33
+ SetValue: REGISTRY_SET_VALUE
34
+ DeleteValue: REGISTRY_DELETE_VALUE
35
+ CreateKey: REGISTRY_CREATE_KEY
0 commit comments