diff --git a/README.md b/README.md index 7e5484a..81085e1 100644 --- a/README.md +++ b/README.md @@ -59,7 +59,7 @@ Additionally you can parse raw events and convert it to rule using [converter](h | key | values | | --- | --- | | `enabled` | If the value is set to `true` the event will be written. If it's set to `false` just ignore the rule. | -| `source` | The source of the events. (Working on more supported sources...)
`Sysmon`
`PowerShell` | +| `source` | `Sysmon`
`PowerShell` | | `category` | For each source there are a list of different categories that can be specified. | | `description` | A simple rule description. | | `payload` | These are the values that will be added to the event. If you don't indicate a specific payload the event will contain the values of the default configuration files located on `conf`. |