CrowdStrike
diff --git a/‎falcon/client/kubernetes_protection/running_container_images_parameters.go
+1-1 b/‎falcon/client/kubernetes_protection/running_container_images_parameters.go
+1-1
diff --git a/‎falcon/models/models_container.go
+2-2 b/‎falcon/models/models_container.go
+2-2
diff --git a/‎specs/transformation.jq
+6-1 b/‎specs/transformation.jq
+6-1
@@ -193,4 +193,9 @@
 | del(.paths."/real-time-response/entities/scripts/v1".patch.responses."200")
 
 # 200 is a valid response from /real-time-response/entities/queued-sessions/command/v1
-| .paths."/real-time-response/entities/queued-sessions/command/v1".delete.responses."200" = .paths."/real-time-response/entities/put-files/v1".delete.responses."200"
+| .paths."/real-time-response/entities/queued-sessions/command/v1".delete.responses."200" = .paths."/real-time-response/entities/put-files/v1".delete.responses."200"
+
+# last_seen and first_seen should be a string
+ | .definitions."models.Container".properties.first_seen.type = "string"
+ | .definitions."models.Container".properties.last_seen.type = "string"
+