Recently PR https://github.com/elastic/integrations/pull/5511 added support for Sysmon new New EventIDs - 8, 9, 19, 20, 27, 28, 255, but its missing values for `event.category` and `event.type`. Also, the winlogbeat's sysmon pipeline also need similar changes: https://github.com/elastic/beats/blob/master/x-pack/winlogbeat/module/sysmon/ingest/sysmon.yml
Recently PR #5511 added support for Sysmon new New EventIDs - 8, 9, 19, 20, 27, 28, 255, but its missing values for
event.categoryandevent.type.Also, the winlogbeat's sysmon pipeline also need similar changes: https://github.com/elastic/beats/blob/master/x-pack/winlogbeat/module/sysmon/ingest/sysmon.yml