This commit is contained in:
fukusuket
2025-03-12 18:08:53 +09:00
parent 87684090d4
commit 05ee8f3122

View File

@@ -88,6 +88,7 @@ fn parse_yaml(doc: Yaml, eid_subcategory_pair: &Vec<(String, String)>) -> Option
}));
} else if let Some(tags) = doc["tags"].as_vec() {
if !tags.contains(&Yaml::from_str("sysmon")) {
extract_event_ids(&doc, &mut event_ids);
subcategories.insert("00000000-0000-0000-0000-000000000000".to_string());
let event_ids: Vec<String> = event_ids.into_iter().collect();
let subcategories: Vec<String> = subcategories.into_iter().collect();