Merge pull request #14 from bmackalicious/patch-2

Update Security_4634.map
EricZimmerman · Nov 5, 2019 · 6d2824d · 6d2824d
2 parents 8e55848 + 74bfd96
commit 6d2824d
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/evtx/Maps/Security_4634.map b/evtx/Maps/Security_4634.map
@@ -14,8 +14,8 @@ Maps:
         Name: TargetUserName
         Value: "/Event/EventData/Data[@Name=\"TargetUserName\"]"
   -  
-    Property: PayloadData3
-    PropertyValue: "LogonType: %LogonType%"
+    Property: PayloadData2
+    PropertyValue: "LogonType %LogonType%"
     Values: 
       - 
         Name: LogonType
@@ -52,4 +52,4 @@ Maps:
 #       <Data Name="TargetLogonId">0x19bf00c7</Data> 
 #       <Data Name="LogonType">2</Data> 
 #   </EventData>
-#</Event>
+#</Event>