add from stix mapping of OS in ECS (#1597)

opencybersecurityalliance · Oct 5, 2023 · 7fb3fde · 7fb3fde
1 parent 8c176d4
commit 7fb3fde
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/stix_shifter_modules/elastic_ecs/stix_translation/json/from_stix_map.json b/stix_shifter_modules/elastic_ecs/stix_translation/json/from_stix_map.json
@@ -272,7 +272,7 @@
       "egress.interface.id": ["observer.egress.interface.id"],
       "egress.interface.name": ["observer.egress.interface.name"],
       "uptime": ["host.uptime"],
-      "os_ref.name": ["host.os.name", "observer.os.name", "observer.product"],
+      "os_ref.name": ["host.os.name", "os.name", "os.type", "observer.os.name", "observer.product"],
       "os_ref.vendor": ["host.os.platform", "observer.os.platform", "observer.vendor"],
       "os_ref.version": ["host.os.version", "observer.os.version", "observer.version"],
       "container.id": ["container.id"],