Aws athena ocsf fixes (#1182)

Co-authored-by: Md Azam <mdazam@ca.ibm.com>
opencybersecurityalliance · Nov 21, 2022 · 0898bb8 · 0898bb8
1 parent 01b18cb
commit 0898bb8
Show file tree

Hide file tree

Showing 4 changed files with 150 additions and 326 deletions.
diff --git a/stix_shifter_modules/aws_athena/stix_translation/json/ocsf_from_stix_map.json b/stix_shifter_modules/aws_athena/stix_translation/json/ocsf_from_stix_map.json
@@ -60,9 +60,6 @@
       "extensions.'x-network-ext'.tcp_flags": [
         "connection_info.tcp_flags"
       ],
-      "protocol": [
-        "connection_info.protocol_name"
-      ],
       "protocols[*]": [
         "connection_info.protocol_num"
       ],
@@ -245,10 +242,6 @@
       "extensions.'x-src-endpoint'.vpc_uid": [
         "src_endpoint.vpc_uid"
       ],
-      "ip_refs[*].value": [
-        "dst_endpoint.ip",
-        "src_endpoint.ip"
-      ],
       "name": [
         "dst_endpoint.name",
         "src_endpoint.name"