Skip to content

Commit e142d2f

Browse files
committed
fix qradar mapping
1 parent ae3e840 commit e142d2f

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

uncoder-core/app/translator/mappings/platforms/qradar/linux_network_connection.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ log_source:
88

99
default_log_source:
1010
devicetype: 11
11-
category: [4012]
11+
category: 4012
1212

1313
field_mapping:
1414
CommandLine: Command

uncoder-core/app/translator/mappings/platforms/qradar/macos_network_connection.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ log_source:
88

99
default_log_source:
1010
devicetype: 102
11-
category: [4012]
11+
category: 4012
1212

1313
field_mapping:
1414
CommandLine: Command

uncoder-core/app/translator/mappings/platforms/qradar/windows_network_connection.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ log_source:
99

1010
default_log_source:
1111
devicetype: 12
12-
category: [4012]
12+
category: 4012
1313
qideventcategory: Microsoft-Windows-Sysmon/Operational
1414

1515
field_mapping:

0 commit comments

Comments
 (0)