Add additional mapping

This commit is contained in:
defensivedepth committed 2026-10-01 15:24:52 -04:00
1 parent 2a4611df45
commit 99322cf26a
1 file changed
+1
@@ -8,6 +8,7 @@ transformations:
mapping:
process.executable: process.executable.caseless
process.parent.executable: process.parent.executable.caseless
process.parent.name: process.parent.name.caseless
process.command_line: process.command_line.caseless
process.parent.command_line: process.parent.command_line.caseless
file.path: file.path.caseless