Stay organized with collections
Save and categorize content based on your preferences.
Change log for MICROSOFT_SENTINEL
Date
Changes
2023-11-03
Enhancement:
- Mapped "ResourceId" to "target.resource.name".
- When "ResourceId" is 'not null' and event has one of "principal" or "target" as 'not null', then map "metadata.event_type" to "USER_RESOURCE_ACCESS".