Hi, I wanna know how I can map the MITRE tags with the suricata rules like in following page (line no 31-33) is done.
https://github.com/SigmaHQ/sigma/blob/master/rules/windows/registry_event/registry_event_add_port_monitor.yml
Maybe you could use the meta keywords to embed it into your rules, see 6.2. Meta Keywords — Suricata 6.0.4 documentation