Update SuccessfulAWSConsoleLoginfromIPAddressObservedConductingPasswo…

…rdSpray.yaml
Azure · Sep 4, 2023 · 6fa561c · 6fa561c
1 parent ea72aae
commit 6fa561c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/...pleDataSources/SuccessfulAWSConsoleLoginfromIPAddressObservedConductingPasswordSpray.yaml b/...pleDataSources/SuccessfulAWSConsoleLoginfromIPAddressObservedConductingPasswordSpray.yaml
@@ -115,5 +115,9 @@ entityMappings:
     fieldMappings:
       - identifier: Address
         columnName: SourceIpAddress
+customDetails:
+   AWSUser: UserIdentityArn
+   UserAgent: UserAgent
+   AWSUserUPN: CTUPN
 kind: Scheduled
 version: 1.0.0