https://www.elastic.co/docs/reference/ecs/ecs-pe
PE Header fields | Elastic Common Schema (ECS)
These fields contain Windows Portable Executable (PE) metadata. The pe fields are expected to be nested at: dll.pe, file.pe, process.pe. Note also that...
pe header fieldselastic common schemaecs