diff --git a/config/profiles.yaml b/config/profiles.yaml index 26bcfa34..d3515c29 100644 --- a/config/profiles.yaml +++ b/config/profiles.yaml @@ -35,8 +35,24 @@ verbose: RuleFile: "%RuleFile%" EvtxFile: "%EvtxFile%" -#Verbose-1 profile plus all field information. (Warning: this will more than double the output file size!) +#Verbose profile with all field information instead of the minimal fields defined in Details. verbose-all-field-info: + Timestamp: "%Timestamp%" + Computer: "%Computer%" + Channel: "%Channel%" + EventID: "%EventID%" + Level: "%Level%" + MitreTactics: "%MitreTactics%" + MitreTags: "%MitreTags%" + OtherTags: "%OtherTags%" + RecordID: "%RecordID%" + RuleTitle: "%RuleTitle%" + AllFieldInfo: "%RecordInformation%" + RuleFile: "%RuleFile%" + EvtxFile: "%EvtxFile%" + +#Verbose profile plus all field information. (Warning: this will more than double the output file size!) +verbose-details-and-all-field-info: Timestamp: "%Timestamp%" Computer: "%Computer%" Channel: "%Channel%"