updated offenses to siem and adjusted reference data to snakecase