2 Commits

Author	SHA1	Message	Date
Brad Kish	1e9d0e9653	Fixes for rules in the sysmon file_event category ... Fix a couple of typos For sysmon_hack_dumpert: Make sure the logsource is category file_event and not sysmon. Don't set the category at the global level. Instead set in the individual document.	2020-07-03 16:22:29 -04:00
Florian Roth	f3fedef8f5	Changed category names and remove sysmon log source	2020-06-24 17:41:21 +02:00