valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 01:45:21 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

DestinationPort to network-traffic:dst_port mapping fix

Browse Source
This commit is contained in:
bar 2020-07-08 14:31:04 +03:00
parent 50ef79b398
commit 8889ae21ca
1 changed files with 2 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
tools/config/stix.yml
View File

@ -43,13 +43,9 @@ fieldmappings:
- ipv6-addr:value
- network-traffic:dst_ref.value
event_data.DestinationPort:
- ipv4-addr:value
- ipv6-addr:value
- network-traffic:dst_ref.value
- network-traffic:dst_port
DestinationPort:
- ipv4-addr:value
- ipv6-addr:value
- network-traffic:dst_ref.value
- network-traffic:dst_port
event_data.SubjectUserName:
- user-account:user_id
event_data.User: