security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update problem-child.md (#1253)

Browse Source
This commit is contained in:
Apoorva Joshi
2021-06-03 12:47:00 -07:00
committed by GitHub
parent 0ec8d67e78
commit 8bb7218e38
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/experimental-machine-learning/problem-child.md
+1 -1
View File
@@ -61,4 +61,4 @@ You can optionally choose to refresh your index mapping from within Kibana:
#### 4. Verify enrichment fields
Any documents corresponding to Windows process events should now be enriched with `problemchild.*`
Any documents corresponding to Windows process events should now be enriched with `problemchild.*`. By default, the enrichment pipeline also consists of a script processor for a blocklist, so you might also see the field `blocklist_label` appear in documents that match the blocklist.