Repository navigation
v5.2.11
Added additional field to the CEF output to represent the original packet data, called packetData. The CEF standard does not have a field defined for the actual payload so the name 'packetData' should be considered when ingesting to a given SIEM solution (Sentinel, etc) https://learn.microsoft.com/en-us/azure/sentinel/cef-name-mapping