Why doesn't threathunting index receive mapped data from sysmon (windows index)?
By the way, I edited the macro's to suit my environment but it still didn't work.
Most probably, because something is wrong.
But seriously, it's waaaay too little information for any help. Be more specific.