PowerShell 4104 needs to match HELK. Few fields that we parse from here that are not in here.
Also I believe powershell_Path should be powershell_path
@Cyb3rWard0g probably going to need your input on this, since the original parser you had some modifications - so just wanted to get your final on it.
PowerShell 4104 needs to match HELK. Few fields that we parse from here that are not in here.
Also I believe powershell_Path should be powershell_path
@Cyb3rWard0g probably going to need your input on this, since the original parser you had some modifications - so just wanted to get your final on it.