f3nris/riposte-marketplace
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: remove vendor-tool wording from mapper descriptions and changelogs

Browse Source 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Guillaume BOURGEOIS
2026-06-26 15:32:30 +02:00
parent c068d9fa9a
commit f3b0f269b8
4 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
integrations/crowdstrike/mappers/search_detections.yaml
+1 -1
View File
@@ -1,5 +1,5 @@
name: "CrowdStrike Falcon Alerts → OCSF"
description: "Exhaustive map of a CrowdStrike Falcon unified alert (alerts/entities/alerts/v2, results_path = resources) to OCSF. Field paths validated against the XSOAR Raptor key maps. Triggering process = actor (actor.*); detected file = subject (file.*); MITRE under attacks.*."
description: "Exhaustive map of a CrowdStrike Falcon unified alert (alerts/entities/alerts/v2, results_path = resources) to OCSF. Field paths validated against the Falcon Raptor alert schema. Triggering process = actor (actor.*); detected file = subject (file.*); MITRE under attacks.*."
field_mappings:
title: "name"
severity: "severity_name = 'Critical' ? 5 : (severity_name = 'High' ? 4 : (severity_name = 'Medium' ? 3 : 2))"