[Backport 2.5] #725 Sigma keywords field not handled correctly#746

Merged

jowg-amazon merged 1 commit intoopensearch-project:2.5from jowg-amazon:bp725to2.5

Mar 11, 2024

+450-22

Commits on Nov 30, 2023

* changed windows sample rule and query construction
jowg-amazon
committed