CCSE: CrowdStrike Certified SIEM Engineer

CPS-compliant parsers must tag four event fields: #event.dataset, #event.kind, #event.module and #event.outcome (alongside #Cps.version, #ecs.version, #observer.type and #Vendor). event.category is not among the required tags.