diff --git a/src/detections/detection.rs b/src/detections/detection.rs index 90c86113..5ed131cc 100644 --- a/src/detections/detection.rs +++ b/src/detections/detection.rs @@ -243,10 +243,9 @@ impl Detection { .unwrap_or_default(); let eid = get_serde_number_to_string(&record_info.record["Event"]["System"]["EventID"]) .unwrap_or_else(|| "-".to_owned()); - let default_output = match DEFAULT_DETAILS - .get(&format!("{}_{}", provider, &eid)) { - Some(str) => str.to_owned(), - None => recinfo.as_ref().unwrap_or(&"-".to_string()).to_string(), + let default_output = match DEFAULT_DETAILS.get(&format!("{}_{}", provider, &eid)) { + Some(str) => str.to_owned(), + None => recinfo.as_ref().unwrap_or(&"-".to_string()).to_string(), }; let opt_record_info = if configs::CONFIG.read().unwrap().args.full_data { recinfo diff --git a/src/detections/utils.rs b/src/detections/utils.rs index bfbc0a3b..18754e3d 100644 --- a/src/detections/utils.rs +++ b/src/detections/utils.rs @@ -236,7 +236,7 @@ pub fn create_rec_info(data: Value, path: String, keys: &[String]) -> EvtxRecord // EvtxRecordInfoを作る let data_str = data.to_string(); let rec_info = Option::Some(create_recordinfos(&data)); - + EvtxRecordInfo { evtx_filepath: path, record: data,