diff --git a/src/detections/system.rs b/src/detections/system.rs index 6399d3f4..fdcea53c 100644 --- a/src/detections/system.rs +++ b/src/detections/system.rs @@ -28,15 +28,15 @@ impl System { fn windows_event_log(&mut self, event_data: HashMap) { match event_data.get("param1") { - Some(_data) => { - if _data == "Windows Event Log" { - println!("Service name : {}", _data); + Some(_param1) => { + if _param1 == "Windows Event Log" { + println!("Service name : {}", _param1); match event_data.get("param2") { - Some(_data) => { - if _data == "disabled" { + Some(_param2) => { + if _param2 == "disabled" { println!("Message : Event Log Service Stopped"); println!("Results : Selective event log manipulation may follow this event."); - } else if _data == "auto start" { + } else if _param2 == "auto start" { println!("Message : Event Log Service Started"); println!("Results : Selective event log manipulation may precede this event."); }