Merge pull request #1060 from davemcatcisco/main

Address gaps in Process Activity and Memory Activity wrt process injection.
ocsf · Apr 24, 2024 · e093f0c · e093f0c
2 parents 7b31e89 + 6f60bd0
commit e093f0c
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -50,6 +50,7 @@ Thankyou! -->
 * #### Categories
 * #### Event Classes
     1. Added `file_result` to File Hosting Activity. #1045
+    2. Added entries to `injection_type_id` enum (`Process Activity`) and `activity_id` enum (`Memory Activity`). #1060
 * #### Profiles
 * #### Objects
 * #### Platform Extensions

diff --git a/dictionary.json b/dictionary.json
@@ -2030,6 +2030,9 @@
         },
         "2": {
           "caption": "Load Library"
+        },
+        "3": {
+          "caption": "Queue APC"
         }
       },
       "sibling": "injection_type",
@@ -4434,4 +4437,4 @@
       }
     }
   }
-}
+}
diff --git a/events/system/memory.json b/events/system/memory.json
@@ -34,6 +34,10 @@
         "8": {
           "description": "Write (Example: <code>WriteProcessMemory</code>)",
           "caption": "Write"
+        },
+        "9": {
+          "description": "Map View (Example: <code>MapViewOfFile2</code>)",
+          "caption": "Map View"
         }
       }
     },