AlphaSOC now includes OCSF mappings for system process events, with full support for array fields — enabling Sigma rules that target process data from platforms such as CrowdStrike and SentinelOne.
AlphaSOC now includes OCSF mappings for system process events, with full support for array fields — enabling Sigma rules that target process data from platforms such as CrowdStrike and SentinelOne.