You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Both Sysmon event 14 and Microsoft Defender 365 "RegistryKeyRenamed" events reference both the original and the new keys, and hence two key fields are needed "key" and "key_modified"
The text was updated successfully, but these errors were encountered:
We have a some questions about this. We don't want to close this issue yet. Let's discuss it in our next community meeting. We can review the previous commit.
OSSEM-CDM/schemas/entities/registry.yml
Line 23 in dacbc88
Both Sysmon event 14 and Microsoft Defender 365 "RegistryKeyRenamed" events reference both the original and the new keys, and hence two key fields are needed "key" and "key_modified"
The text was updated successfully, but these errors were encountered: