diff --git a/src/afterfact.rs b/src/afterfact.rs index ddfd183a..51c49bb3 100644 --- a/src/afterfact.rs +++ b/src/afterfact.rs @@ -85,10 +85,8 @@ fn test_emit_csv() { "CommandLine": "hoge" }, "System": { - "TimeCreated": { - "#attributes":{ - "SystemTime": "1996-02-27T01:05:01Z" - } + "TimeCreated_attributes": { + "SystemTime": "1996-02-27T01:05:01Z" } } } diff --git a/src/detections/print.rs b/src/detections/print.rs index 211b039a..0f570e30 100644 --- a/src/detections/print.rs +++ b/src/detections/print.rs @@ -156,10 +156,8 @@ mod tests { "CommandLine": "hoge" }, "System": { - "TimeCreated": { - "#attributes":{ - "SystemTime": "1996-02-27T01:05:01Z" - } + "TimeCreated_attributes": { + "SystemTime": "1996-02-27T01:05:01Z" } } } @@ -179,10 +177,8 @@ mod tests { "CommandLine": "hoge" }, "System": { - "TimeCreated": { - "#attributes":{ - "SystemTime": "1996-02-27T01:05:01Z" - } + "TimeCreated_attributes": { + "SystemTime": "1996-02-27T01:05:01Z" } } } @@ -202,10 +198,8 @@ mod tests { "CommandLine": "hoge" }, "System": { - "TimeCreated": { - "#attributes":{ - "SystemTime": "2000-01-21T09:06:01Z" - } + "TimeCreated_attributes": { + "SystemTime": "2000-01-21T09:06:01Z" } } }