minimal:
    Timestamp: '%Timestamp%'
    Computer: '%Computer%'
    Channel: '%Channel%'
    EventID: '%EventID%'
    Level: '%Level%'
    RuleTitle: '%RuleTitle%'
    Details: '%Details%'

default:
    Timestamp: '%Timestamp%'
    Computer: '%Computer%'
    Channel: '%Channel%'
    EventID: '%EventID%'
    Level: '%Level%'
    Tags: '%MitreAttack%'
    RecordID: '%RecordID%'
    RuleTitle: '%RuleTitle%'
    Details: '%Details%'

verbose-1:
    Timestamp: '%Timestamp%'
    Computer: '%Computer%'
    Channel: '%Channel%'
    EventID: '%EventID%'
    Level: '%Level%'
    Tags: '%MitreAttack%'
    RecordID: '%RecordID%'
    RuleTitle: '%RuleTitle%'
    Details: '%Details%'
    RulePath: '%RulePath%'
    FilePath: '%FilePath%'

verbose-2:
    Timestamp: '%Timestamp%'
    Computer: '%Computer%'
    Channel: '%Channel%'
    EventID: '%EventID%'
    Level: '%Level%'
    Tags: '%MitreAttack%'
    RecordID: '%RecordID%'
    RuleTitle: '%RuleTitle%'
    Details: '%Details%'
    AllFieldInfo: '%RecordInformation%'