Merge pull request #1450 from SEKOIA-IO/update-intake-documentation

Refresh intakes documentation
SEKOIA-IO · Nov 24, 2023 · 34e02e0 · 34e02e0
2 parents d25680c + 1949dc8
commit 34e02e0
Show file tree

Hide file tree

Showing 5 changed files with 2,085 additions and 89 deletions.
diff --git a/...perations_center/integrations/generated/250e4095-fa08-4101-bb02-e72f870fcbd1.md b/...perations_center/integrations/generated/250e4095-fa08-4101-bb02-e72f870fcbd1.md
@@ -701,7 +701,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
         },
         "process": {
             "executable": "C:\\Windows\\System32\\services.exe",
-            "name": "Advapi ",
+            "name": "services.exe",
             "pid": 676
         },
         "related": {
@@ -713,14 +713,15 @@ Find below few samples of events and how they are normalized by Sekoia.io.
             ]
         },
         "sekoiaio": {
+            "authentication": {
+                "process": {
+                    "name": "Advapi "
+                }
+            },
             "client": {
                 "name": "SRV-FOO",
                 "os": {
                     "type": "windows"
-                },
-                "user": {
-                    "id": "S-1-5-18",
-                    "name": "SRV-FOO"
                 }
             },
             "server": {
@@ -809,9 +810,6 @@ Find below few samples of events and how they are normalized by Sekoia.io.
                 "type": "windows"
             }
         },
-        "process": {
-            "name": "NtLmSsp "
-        },
         "related": {
             "hosts": [
                 "foo-vm"
@@ -821,13 +819,15 @@ Find below few samples of events and how they are normalized by Sekoia.io.
             ]
         },
         "sekoiaio": {
+            "authentication": {
+                "process": {
+                    "name": "NtLmSsp "
+                }
+            },
             "client": {
                 "name": "WIN-FOO",
                 "os": {
                     "type": "windows"
-                },
-                "user": {
-                    "id": "S-1-0-0"
                 }
             },
             "server": {