Ben de Haan cb9a9bc2ff Added LogPoint conditional username mapping ...

Conditional mapping of SubjectAccountName based on EventID. Not a comprehensive list, but should include most relevant Event IDs.

2017-03-30 09:51:32 +02:00

..

elk-sysmon.yml

Log source conditions are integrated in generated expressions

2017-03-14 23:22:32 +01:00

elk-windows.yml

Log source conditions are integrated in generated expressions

2017-03-14 23:22:32 +01:00

logpoint-windows-all.yml

Added LogPoint conditional username mapping

2017-03-30 09:51:32 +02:00

splunk-windows-all.yml

PowerShell Classic Log in Splunk Config Example

2017-03-22 11:17:46 +01:00