Update: Collect result message to print.rs-Message
This commit is contained in:
@@ -1,4 +1,3 @@
|
||||
use crate::detections::print::MESSAGES;
|
||||
use crate::detections::utils;
|
||||
use crate::models::event;
|
||||
use regex::Regex;
|
||||
@@ -26,9 +25,6 @@ impl PowerShell {
|
||||
return;
|
||||
}
|
||||
|
||||
let message = MESSAGES.lock().unwrap();
|
||||
println!("{}", message.get("4103"));
|
||||
|
||||
let default = String::from("");
|
||||
let commandline = event_data.get("ContextInfo").unwrap_or(&default);
|
||||
|
||||
@@ -52,8 +48,6 @@ impl PowerShell {
|
||||
if event_id != "4104" {
|
||||
return;
|
||||
}
|
||||
let message = MESSAGES.lock().unwrap();
|
||||
println!("{}", message.get("4104"));
|
||||
|
||||
let default = String::from("");
|
||||
let path = event_data.get("Path").unwrap().to_string();
|
||||
|
||||
Reference in New Issue
Block a user