Added logic to improve Sysmon KQL generation#126

Open

0xffhh wants to merge 2 commits intoOTRF:masterfrom 0xffhh:master

+14-2

Commits on Oct 25, 2022

Generate typed fields for Sysmon to prevent unnecessary typecasting in detection logic.
0xffhh
committed
Fixed an annoyance in the Sysmon schema, where the casing for GUID in event 10 is different from the rest.
0xffhh
committed