Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tonymeehan/f0728b97ba6d0b8537bcbd7db8ed25cb to your computer and use it in GitHub Desktop.
Save tonymeehan/f0728b97ba6d0b8537bcbd7db8ed25cb to your computer and use it in GitHub Desktop.
{
"date": {
"field": "crowdstrike.metadata.eventCreationTime",
"target_field": "@timestamp",
"formats": ["UNIX_MS"],
"timezone": "UTC"
}
},
{
"set": {
"field": "event.kind",
"value": "alert"
}
},
{
"set": {
"field": "event.type",
"value": [ "info" ]
}
},
{
"set": {
"field": "event.category",
"value": [ "malware" ]
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment