Skip to content

v5.2.11

  • v5.2.11
  • f46fecd
  • Verified

    This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
  • Choose a tag to compare

  • v5.2.11
  • f46fecd
  • Choose a tag to compare

  • Verified

    This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
@skhademcis skhademcis tagged this 26 Oct 18:44
Added additional field to the CEF output to represent the original packet data, called packetData.  The CEF standard does not have a field defined for the actual payload so the name 'packetData' should be considered when ingesting to a given SIEM solution (Sentinel, etc)

https://learn.microsoft.com/en-us/azure/sentinel/cef-name-mapping
Assets 2
Loading