fix(ocsf): Include check_id as metadata.event_code (#3748)

This commit is contained in:
Pepe Fagoaga
2024-04-10 15:51:48 +02:00
committed by GitHub
parent c7f09df4e7
commit 571f3ebe1d
3 changed files with 4 additions and 4 deletions
+2 -2
View File
@@ -268,7 +268,7 @@ The following is the mapping between the native JSON and the Detection Finding f
| AssessmentStartTime | event_time |
| FindingUniqueId | finding_info.uid |
| Provider | cloud.account.type |
| CheckID | unmapped.check_id |
| CheckID | metadata.event_code |
| CheckTitle | finding_info.title |
| CheckType | unmapped.check_type |
| ServiceName | resources.group.name |
@@ -297,7 +297,7 @@ The following is the mapping between the native JSON and the Detection Finding f
| OrganizationsInfo.account_name | cloud.account.name |
| OrganizationsInfo.account_email | _Not mapped yet_ |
| OrganizationsInfo.account_arn | _Not mapped yet_ |
| OrganizationsInfo.account_org | cloud.org.name |
| OrganizationsInfo.account_org | cloud.org.name |
| OrganizationsInfo.account_tags | cloud.account.labels _Available from OCSF 1.2_ |
| Region | resources.region |
| ResourceId | resources.name |