From 972c806bc8926230e2039f5363b36c264299d909 Mon Sep 17 00:00:00 2001 From: Andreas Hunkeler Date: Thu, 13 Feb 2020 10:50:23 +0100 Subject: [PATCH] Fix readme for newer Windows TA --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index d0bb78d..faa1dde 100644 --- a/README.md +++ b/README.md @@ -20,10 +20,10 @@ Add the folder "ta-microsoft-powershell" to a ZIP and upload it to https://spunk ## Sourcetypes -Following sourcetype is used for field extraction. +Following source is used for field extraction. ``` -sourcetype="XmlWinEventLog:Microsoft-Windows-PowerShell/Operational" +source="XmlWinEventLog:Microsoft-Windows-PowerShell/Operational" ``` ## Changelog