CSEC_PUBLIC/hayabusa
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fixed referecne proveider name filed #359

Browse Source
This commit is contained in:
DustInDark
2022-06-20 13:46:28 +09:00
parent aab167a419
commit 7ca66e1d87
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/detections/detection.rs
View File

@@ -236,10 +236,13 @@ impl Detection {
};
let ch_str = &get_serde_number_to_string(&record_info.record["Event"]["System"]["Channel"])
.unwrap_or_default();
let provider =
&get_serde_number_to_string(&record_info.record["Event"]["System"]["Provider Name"])
.unwrap_or_default();
let eid = get_serde_number_to_string(&record_info.record["Event"]["System"]["EventID"])
.unwrap_or_else(|| "-".to_owned());
let default_output = DEFAULT_DETAILS
.get(&format!("{}_{}", ch_str, &eid))
.get(&format!("{}_{}", provider, &eid))
.unwrap_or(&"-".to_string())
.to_string();
let detect_info = DetectInfo {