sentinel_one: fix sample event mac address

[efd6]

Proposed commit message

See title.

Fixes this error.

static test: Verify sample_event.json in sentinel_one.threat

one or more errors found in document: [0] parsing field value failed: field "host.mac"'s value, X2-0X-0X-X6-00-XX, does not match the expected pattern: ^[A-F0-9]{2}(-[A-F0-9]{2}){5,}$

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Author's Checklist

• [ ]

How to test this PR locally

Related issues

• For all: migrate ssi packages to ecs@mappings #10135

Screenshots

[elasticmachine]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: ed8681a

History

• 💔 Build #12641 failed 81fcc1a109026c50ecd32fd8a632a36e92ef718d

cc @efd6

[elastic-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[elasticmachine]

Package sentinel_one - 1.23.3 containing this change is available at https://epr.elastic.co/search?package=sentinel_one