ASimFileEventMicrosoftSysmon.yaml-27

[Alekhya0824]

Required items, please complete

Change(s):

• Created a new file for WindowsEvent and added WindowsEvent parser in it. In Event file removed WindowsEvent parser and in ASimFileEvent added WindowsEvent Parser name and same changes have done for vim as well.

Reason for Change(s):

• To Split the WindowsEven and Event parser separately

Version Updated:

• yes

Testing Completed:

• yes

Checked that the validations are passing and have addressed any issues that are present:

• yes

[contentautomationbot]

ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files.
To find the new ARM templates, pull your branch.

[v-atulyadav]

Hi @Alekhya0824,
Please check below failed KQL validation. Thanks

[v-atulyadav]

Hi @Alekhya0824,
Validations failing please check. Thanks

[contentautomationbot]

ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files.
To find the new ARM templates, pull your branch.

[contentautomationbot]

ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files.
To find the new ARM templates, pull your branch.

[contentautomationbot]

ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files.
To find the new ARM templates, pull your branch.

[v-atulyadav]

Hi @Alekhya0824,
Please work on open comment. Thanks

[contentautomationbot]

ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files.
To find the new ARM templates, pull your branch.