clear

2021-12-09 01:15:01 +09:00
parent 3f11e426ba
commit 360d80b578
3 changed files with 2 additions and 20 deletions
--- a/test_files/rules/exclude_rules/1.yml
+++ b/test_files/rules/exclude_rules/1.yml
@@ -1,19 +0,0 @@
-title: Sysmon Check command lines
-id : 4fe151c2-ecf9-4fae-95ae-b88ec9c2fca6
-description: hogehoge
-enabled: true
-author: Yea
-logsource: 
-    product: windows
-detection:
-    selection:
-        EventLog: Sysmon
-        EventID: 1
-        CommandLine: '*'
-    condition: selection
-falsepositives:
-    - unknown
-level: medium
-output: 'CommandLine=%CommandLine%¥nParentImage=%ParentImage%'
-creation_date: 2020/11/8
-updated_date: 2020/11/8
--- a/test_files/rules/yaml/1.yml
+++ b/test_files/rules/yaml/1.yml
@@ -1,4 +1,5 @@
 title: Sysmon Check command lines
+id : 4fe151c2-ecf9-4fae-95ae-b88ec9c2fca6
 description: hogehoge
 enabled: true
 author: Yea