def parse_process_event(self, event):
        """ Parse a single Process event
        Based on:
        - Act (action)
        :param event: event to be parsed (single line in log)
        :return: parsed event
        """
        action = event['Act'] if 'Act' in event else None
        if action == 'Acc':
            event_id = 'mail_process_accepted'
        elif action == 'Hld':
            event_id = 'mail_process_held'
        elif action == 'Sdbx':
            event_id = 'mail_process_sandboxed'
        elif action == 'Rty':
            event_id = 'mail_process_retried'
        elif action == 'Bnc':
            event_id = 'mail_process_bounced'
        else:
            event_id = 'mail_process_other'
        category = 'mail_process'
        timestamp = self.date_helper.convert_from_mimecast_format(event['datetime'])
        event.update({'mimecastEventId': event_id, 'mimecastEventCategory': category, 'time_generated': timestamp})

        return event
 Parse a single Process event
        Based on:
        - Act (action)
        :param event: event to be parsed (single line in log)
        :return: parsed event
        
Solutions/MimecastSEG/Data Connectors/TransformData/siem_parser.py