diff --git a/global_helpers/panther_base_helpers.py b/global_helpers/panther_base_helpers.py index a8a590e6f..15026d53e 100644 --- a/global_helpers/panther_base_helpers.py +++ b/global_helpers/panther_base_helpers.py @@ -473,7 +473,9 @@ def msft_graph_alert_context(event): return { "category": event.get("category", ""), "description": event.get("description", ""), - "userstates": event.get("userstates", []), + "userStates": event.get("userStates", []), + "fileStates": event.get("fileStates", []), + "hostStates": event.get("hostStates", []), }