f3nris/riposte-marketplace
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(harfanglab): correct get_threats mapper to native threat fields; add agent.osversion

Browse Source 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Guillaume BOURGEOIS
2026-06-26 14:53:16 +02:00
parent 44694f6d9e
commit 0f4852bb54
3 changed files with 10 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
integrations/harfanglab/mappers/get_security_events.yaml
+1
View File
@@ -12,6 +12,7 @@ ocsf:
- { source_path: "agent.domainname", ocsf_field: "src_endpoint.domain" }
- { source_path: "agent.osproducttype", ocsf_field: "src_endpoint.os.name" }
- { source_path: "agent.ostype", ocsf_field: "src_endpoint.os.type" }
- { source_path: "agent.osversion", ocsf_field: "device.os.version" }
- { source_path: "agent.agentid", ocsf_field: "device.uid" }
# ── Finding ───────────────────────────────────────────────────────
- { source_path: "id", ocsf_field: "finding_info.uid" }