FEATURE: Add Events table columns for event.module playbook

[dougburks]

As a defender, when I'm working in Dashboards/Hunt, I need Events table columns for event.module playbook:

  ':playbook:':
    - soc_timestamp
    - rule.name
    - event.severity_label
    - event_data.event.dataset
    - event_data.source.ip
    - event_data.source.port
    - event_data.destination.host
    - event_data.destination.port
    - event_data.process.executable
    - event_data.process.pid

Also update the existing playbook entry for Alerts:

        ':playbook:':
          - soc_timestamp
          - rule.name
          - event.severity_label
          - event_data.event.dataset
          - event_data.source.ip
          - event_data.source.port
          - event_data.destination.host
          - event_data.destination.port
          - event_data.process.executable
          - event_data.process.pid

[thedeadliestcatch]

An additional cmdline and similar columns would also be relevant (as well as parent process executable/name).

[dougburks]

Tested and verified.

Alerts:

Dashboards: