extend cim

stbe · Jul 10, 2021 · 9005b58 · 9005b58
1 parent 681accf
commit 9005b58
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tools/sigma/backends/cim.py b/tools/sigma/backends/cim.py
@@ -43,7 +43,7 @@
                     "process_hash": ["Hashes"],
                     "process_id": ["ProcessId"],
                     "process_guid": ["ProcessGuid"],
-                    "process_integrity_level": [],
+                    "process_integrity_level": ["IntegrityLevel"],
                     "process_name": [],
                     "process_path": ["Image"],
                     "tag": [],