Skip to content

Commit d9d5b0d

Browse files
committed
Improve AQL mapping logic; Palo Alto add support keywords; Sigma add mapping
1 parent 4b2a641 commit d9d5b0d

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

uncoder-core/app/translator/mappings/platforms/sigma/windows_powershell.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,8 @@ description: Text that describe current mapping
44

55
log_source:
66
product: [windows]
7-
service: [powershell, ps_classic_provider_start, ps_classic_script, ps_classic_start, ps_module, ps_script]
7+
service: [powershell]
8+
category: [ps_classic_provider_start, ps_classic_script, ps_classic_start, ps_module, ps_script]
89

910
default_log_source:
1011
product: windows

0 commit comments

Comments
 (0)