From d94728432ac6d41d95bccbdd3f2cf59f6536c7ee Mon Sep 17 00:00:00 2001
From: phaseshiftg <115187865+phaseshiftg@users.noreply.github.com>
Date: Tue, 10 Jan 2023 18:46:24 -0700
Subject: [PATCH] correct linux mapping error (#263)

Signed-off-by: Grant Haywood <grant@phaseshift.studio>
(cherry picked from commit 7bdb8e895baef9523035f18c975aa25eb1b27342)
---
 src/main/resources/OSMapping/linux/mappings.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main/resources/OSMapping/linux/mappings.json b/src/main/resources/OSMapping/linux/mappings.json
index bff2b5649..f41dc89e7 100644
--- a/src/main/resources/OSMapping/linux/mappings.json
+++ b/src/main/resources/OSMapping/linux/mappings.json
@@ -21,7 +21,7 @@
       "type": "alias"
     },
     "system-auth-user": {
-      "path": "auditd.log.exe",
+      "path": "system.auth.user",
       "type": "alias"
     },
     "process-exe": {