pivot_keywords.txt

Source Computers.WorkstationName
Subject Users.SubjectUserName
Target Users.TargetUserName
Users.User
Subject Logon IDs.SubjectLogonId
Target Logon IDs.TargetLogonId
Logon IDs.LogonId
IP Addresses.IpAddress
Source IP Addresses.SourceIp
Source IP Addresses.ClientAddress
Source IP Addresses.SourceAddress
Target IP Addresses.DestinationIp
Target IP Addresses.DestAddress
Processes.Image
Processes.NewProcessName
Command Lines.CommandLine