diff --git a/src/afterfact.rs b/src/afterfact.rs index 3419d19d..571952ea 100644 --- a/src/afterfact.rs +++ b/src/afterfact.rs @@ -722,7 +722,7 @@ mod tests { fn test_emit_csv_output() { let mock_ch_filter = - Message::create_output_filter_config("config/channel_abbreviations.txt", true, false); + Message::create_output_filter_config("rules/config/channel_abbreviations.txt", true, false); let test_filepath: &str = "test.evtx"; let test_rulepath: &str = "test-rule.yml"; let test_title = "test_title"; diff --git a/src/detections/configs.rs b/src/detections/configs.rs index 7024c2e6..8603300e 100644 --- a/src/detections/configs.rs +++ b/src/detections/configs.rs @@ -242,13 +242,13 @@ impl ConfigReader<'_> { headless_help: String::default(), event_timeline_config: load_eventcode_info( CURRENT_EXE_PATH - .join("config/statistics_event_info.txt") + .join("rules/config/statistics_event_info.txt") .to_str() .unwrap(), ), target_eventids: load_target_ids( CURRENT_EXE_PATH - .join("config/target_eventids.txt") + .join("rules/config/target_event_IDs.txt") .to_str() .unwrap(), ), diff --git a/src/detections/print.rs b/src/detections/print.rs index b92ecdbb..4d0daf2d 100644 --- a/src/detections/print.rs +++ b/src/detections/print.rs @@ -63,7 +63,7 @@ lazy_static! { ); pub static ref CH_CONFIG: HashMap = Message::create_output_filter_config( CURRENT_EXE_PATH - .join("config/channel_abbreviations.txt") + .join("rules/config/channel_abbreviations.txt") .to_str() .unwrap(), false,