update profile
This commit is contained in:
@@ -35,8 +35,24 @@ verbose:
|
||||
RuleFile: "%RuleFile%"
|
||||
EvtxFile: "%EvtxFile%"
|
||||
|
||||
#Verbose-1 profile plus all field information. (Warning: this will more than double the output file size!)
|
||||
#Verbose profile with all field information instead of the minimal fields defined in Details.
|
||||
verbose-all-field-info:
|
||||
Timestamp: "%Timestamp%"
|
||||
Computer: "%Computer%"
|
||||
Channel: "%Channel%"
|
||||
EventID: "%EventID%"
|
||||
Level: "%Level%"
|
||||
MitreTactics: "%MitreTactics%"
|
||||
MitreTags: "%MitreTags%"
|
||||
OtherTags: "%OtherTags%"
|
||||
RecordID: "%RecordID%"
|
||||
RuleTitle: "%RuleTitle%"
|
||||
AllFieldInfo: "%RecordInformation%"
|
||||
RuleFile: "%RuleFile%"
|
||||
EvtxFile: "%EvtxFile%"
|
||||
|
||||
#Verbose profile plus all field information. (Warning: this will more than double the output file size!)
|
||||
verbose-details-and-all-field-info:
|
||||
Timestamp: "%Timestamp%"
|
||||
Computer: "%Computer%"
|
||||
Channel: "%Channel%"
|
||||
|
||||
Reference in New Issue
Block a user