We need help with the mapping of security events to ATT&CK Volume data source.
Potential security events providers:
- Windows Security Events
- OSQuery
- AWS
- Azure
- GCP
- suggestions?
Links: https://github.com/mitre-attack/attack-datasources/blob/main/contribution/volume.yml