Sysmon log fields translated to MDE log fields

[Jeff Walzer]

Does anyone know of any documentation that sat Sysmon fields translate to what MDE event fields? Looking to repurpose some Sysmon queries for MDE events and I have not been able to find any docs that shows what Sysmon fields translate to what MDE events fields.

Thx

[#2 · Accepted solution]

@Jeff Walzer https://medium.com/falconforce/sysmon-vs-microsoft-defender-for-endpoint-mde-internals-0x01-1e5663b1...

[#3]

I can't thank you enough!