Lower case all fields in Sigma Rules

[nNipsx-Sec]

When created fields mapping in pipelines, i think make all fields in sigma rules import to lower case to easier to created mapping

[frack113]

Hello,
I don't think it is a good idea.
for example
OriginalFileName is use by sysmon.
OriginalFilename is the field use by microsoft ETW when rename a file.
Filename and FileName are not the same.

You have to check the behavior of the backend

[nNipsx-Sec]

Got it. Thanks for reccommend 😀