Added logic to improve Sysmon KQL generation - #126

Open

0xffhh wants to merge 2 commits into

OTRF:masterfrom

Commits on Oct 25, 2022

Generate typed fields for Sysmon to prevent unnecessary typecasting in detection logic.
0xffhh
committed
b0b7735
Fixed an annoyance in the Sysmon schema, where the casing for GUID in event 10 is different from the rest.
0xffhh
committed
9c2b172