<html lang="en">
<body>
 
<p>
    <b>[OOTB] Cyberprotect Cyber Backup syslog. Version 3</b><br>
	Change log:<br>
	<ul>
		<li>New regular expression was added to the main normalizer. Regular expression was fixed. New mapping was added in the main normalizer. Event field "msg" was mapped to the KUMA field "Message", event field "NotParsed" was mapped to the KUMA field "DeviceCustomString6".</li>
		<li>Extra normalizer "all" was changed. Event field "act" was mapped to the KUMA field "DeviceAction", event field "|cat" was mapped to the KUMA field "DeviceEventCategory", event field "cn1" was mapped to the KUMA field "EventOutcome", event field "cs1" was mapped to the KUMA field "DeviceCustomString1", event field "cs1" was mapped to the KUMA field "DeviceCustomString1", event field "cs2" was mapped to the KUMA field "DeviceCustomString2", event field "cs3" was mapped to the KUMA field "S.PrincipalType", event field "cs4" was mapped to the KUMA field "FlexString2", event field "cs5" was mapped to the KUMA field "cs6", event field "cs6" was mapped to the KUMA field "FlexString1", event field "dst" was mapped to the KUMA field "OldFilePermission", event field "dvcExternalId" was mapped to the KUMA field "DeviceExternalId", event field "end" was mapped to the KUMA field "EndTime", event field "reportedResourceID" was mapped to the KUMA field "FileID", event field "reportedResourceName" was mapped to the KUMA field "FileName", event field "reportedResourceType" was mapped to the KUMA field "FileType", event field "requestClientApplication" was mapped to the KUMA field "RequestClientApplication", event field "sourceServiceName" was mapped to the KUMA field "SourceServiceName", event field "spid" was mapped to the KUMA field "SourceProcessID", event field "src" was mapped to the KUMA field "SourceAddress", event field "suid" was mapped to the KUMA field "SourceUserID", event field "suser" was mapped to the KUMA field "SourceUserName".</li>
		<li>Extra normalizer "all" was changed. Event enrichment was added to the KUMA field "SourceAddress" (data from the field "FilePermisson" was mapped to the KUMA field "SourceAddress" with regular expression "([^:]+):(.+)"), Event enrichment was added to the KUMA field "SourcePort" (data from the field "FilePermisson" was mapped to the KUMA field "SourcePort" with regular expression "([^:]+):(.+)"), Event enrichment was added to the KUMA field "DestinarionAddress" (data from the field "OldFilePermisson" was mapped to the KUMA field "DestinarionAddress" with regular expression "([^:]+):(.+)"), Event enrichment was added to the KUMA field "DestinarionPort" (data from the field "OldFilePermisson" was mapped to the KUMA field "DestinarionPort" with regular expression "([^:]+):(.+)").</li>
		<li>Extra normalizer "all" was changed. Mutation with replace function was added to the event field "objectSubtype" ("::" replace to " ").</li
	</ul>
</p> 
 
<p>
    <b>[OOTB] Cyberprotect Cyber Backup syslog. Version 2</b><br>
	Change log:<br>
	New regular expression was added to the main normalizer.
</p>
 
<p>
    <b>[OOTB] Cyberprotect Cyber Backup syslog. Version 1</b><br>
	This is the first version of the package.
</p>

</body>
</html>