Merge pull request #216 from AndrewRathbun/master

remove spaces to be consistent with System:1
EricZimmerman · Jan 6, 2023 · 51fc8da · 51fc8da
2 parents 79972b7 + 92683d6
commit 51fc8da
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/evtx/Maps/Security_Microsoft-Windows-Security-Auditing_4616.map b/evtx/Maps/Security_Microsoft-Windows-Security-Auditing_4616.map
@@ -26,14 +26,14 @@ Maps:
         Value: "/Event/EventData/Data[@Name=\"ProcessName\"]"
   -
     Property: PayloadData1
-    PropertyValue: "Previous Time: %PreviousTime%"
+    PropertyValue: "PreviousTime: %PreviousTime%"
     Values:
       -
         Name: PreviousTime
         Value: "/Event/EventData/Data[@Name=\"PreviousTime\"]"
   -
     Property: PayloadData2
-    PropertyValue: "New Time: %NewTime%"
+    PropertyValue: "NewTime: %NewTime%"
     Values:
       -
         Name: NewTime