Merge pull request #198 from UncoderIO/gis-improve_qradar_palo_alto_mapping

nazargesyk · web-flow · commit 41c0d429ff91 · 2024-10-16T10:29:34.000+03:00
Gis improve qradar palo alto mapping
diff --git a/uncoder-core/app/translator/mappings/platforms/qradar/default.yml b/uncoder-core/app/translator/mappings/platforms/qradar/default.yml
@@ -14,6 +14,8 @@ field_mapping:
     - DstPort
     - DestinationPort
     - remoteport
+  dst-hostname: DstHost
+  src-hostname: SrcHost
   src-port:
     - SourcePort
     - localport
@@ -94,11 +96,11 @@ field_mapping:
   Action: Action
   Workstation: Machine Identifier
   GroupMembership: Role Name
-  FileName: 
+  FileName:
     - Filename
     - File Name
     - Encoded Filename
-  RegistryKey: 
+  RegistryKey:
     - Registry Key
     - Target Object
   RegistryValue: RegistryValue
diff --git a/uncoder-core/app/translator/mappings/platforms/qradar/windows_process_creation.yml b/uncoder-core/app/translator/mappings/platforms/qradar/windows_process_creation.yml
@@ -24,7 +24,7 @@ field_mapping:
     - ProcessName
   IntegrityLevel: IntegrityLevel
   ParentCommandLine: Parent Command
-  ParentImage: 
+  ParentImage:
     - Parent Process Path
     - ParentProcessName
   ParentUser: ParentUser
