Replies: 1 comment
-
Implemented in #489. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
The current description of
rcode
field in the dns_activity class is not consistent with other sibling string fields in OCSF.Currently it reads -
The DNS server response code, as defined by the event source.
It should be updated to read -
The server response code, normalized to the caption of the rcode_id value. In the case of 'Other', it is defined by the event source.
5 votes ·
Beta Was this translation helpful? Give feedback.
All reactions