From 8af992ee6b63181b21cf1f35bf61346d7838449f Mon Sep 17 00:00:00 2001
From: Md Azam <mdazam@ca.ibm.com>
Date: Tue, 15 Mar 2022 15:59:48 -0300
Subject: [PATCH] remove process_user field mapping from windows-registry-key
 stix object

---
 .../splunk/stix_translation/json/to_stix_map.json            | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/stix_shifter_modules/splunk/stix_translation/json/to_stix_map.json b/stix_shifter_modules/splunk/stix_translation/json/to_stix_map.json
index 51a7b077e..7aeeb9563 100644
--- a/stix_shifter_modules/splunk/stix_translation/json/to_stix_map.json
+++ b/stix_shifter_modules/splunk/stix_translation/json/to_stix_map.json
@@ -184,11 +184,6 @@
     }
   ],
   "process_user": [
-    {
-      "key": "windows-registry-key.creator_user_ref",
-      "object": "windows-registry-key",
-      "references": "authentication"
-    },
     {
       "key": "process.creator_user_ref",
       "object": "process",