update others_compliance mappings (#302) (#347)

Signed-off-by: Grant Haywood <[email protected]>

src/main/resources/OSMapping/others_compliance/fieldmappings.yml

@@ -1,7 +1,7 @@
 # this file provides pre-defined mappings for Sigma fields defined for all Sigma rules under compliance log group to their corresponding ECS Fields.
 fieldmappings:
-  EventID: event_uid
-  HiveName: unmapped.HiveName
-  fieldB: mappedB
-  fieldA1: mappedA
+  host.scan.vuln: vulnerability-id
+  EventID: winlog-event_id
+  host.scan.vuln_name: vulnerability-enumeration
+  destination.port: netflow-tcp_destination_port
   creationTime: timestamp

src/main/resources/OSMapping/others_compliance/mappings.json

@@ -1,32 +1,24 @@
 {
   "properties": {
-    "windows-event_data-CommandLine": {
-      "type": "alias",
-      "path": "CommandLine"
-    },
-    "event_uid": {
-      "type": "alias",
-      "path": "EventID"
-    },
-    "windows-hostname": {
-      "type": "alias",
-      "path": "HostName"
+    "vulnerability-id": {
+      "path": "vulnerability.id",
+      "type": "alias"
     },
-    "windows-message": {
-      "type": "alias",
-      "path": "Message"
+    "winlog-event_id": {
+      "path": "winlog.event_id",
+      "type": "alias"
     },
-    "windows-provider-name": {
-      "type": "alias",
-      "path": "Provider_Name"
+    "vulnerability-enumeration": {
+      "path": "vulnerability.enumeration",
+      "type": "alias"
     },
-    "windows-servicename": {
-      "type": "alias",
-      "path": "ServiceName"
+    "netflow-tcp_destination_port": {
+      "path": "netflow.tcp_destination_port",
+      "type": "alias"
     },
     "timestamp": {
       "path": "creationTime",
       "type": "alias"
     }
   }
-}
+}