How to do value comparison?
trend-jason-x-lin opened this issue · 1 comments
trend-jason-x-lin commented
Is there a way to compare column values with specific values such as EventId > 10?
I saw there is an aggregation with the comparison (count(UserName) by SourceWorkstation > 3) but I don't need aggregation.
trend-jason-x-lin commented
Duplicate with discussion https://github.com/SigmaHQ/sigma/discussions/4035 here.