mirror of
https://github.com/SigmaHQ/sigma
synced 2026-06-08 12:34:14 +00:00
Thomas Patzke
8 lines
160 B
YAML
8 lines
160 B
YAML
fieldmappings:
|
|
event_id:
|
|
- event_id
|
|
- eventid
|
|
subject_account_name:
|
|
EventID=1234: san
|
|
EventID=4624: subject_accountname
|