diff --git a/src/detections/detection.rs b/src/detections/detection.rs index 417c5cd8..4f07f017 100644 --- a/src/detections/detection.rs +++ b/src/detections/detection.rs @@ -3,8 +3,8 @@ extern crate quick_xml; use crate::detections::application; use crate::detections::common; use crate::detections::security; -use crate::detections::system; use crate::detections::sysmon; +use crate::detections::system; use crate::models::event; use evtx::EvtxParser; use quick_xml::de::DeError; diff --git a/src/detections/mod.rs b/src/detections/mod.rs index 2e67495c..3b50be07 100644 --- a/src/detections/mod.rs +++ b/src/detections/mod.rs @@ -2,5 +2,5 @@ mod application; mod common; pub mod detection; mod security; +mod sysmon; mod system; -mod sysmon; \ No newline at end of file diff --git a/src/detections/sysmon.rs b/src/detections/sysmon.rs index 34bfb6f8..613bf183 100644 --- a/src/detections/sysmon.rs +++ b/src/detections/sysmon.rs @@ -24,10 +24,10 @@ impl Sysmon { fn sysmon_event_1(&mut self, event_data: HashMap) { println!("Message : Sysmon event 1"); if let Some(_image) = event_data.get("Image") { - println!("_image : {}",_image); + println!("_image : {}", _image); } if let Some(_command_line) = event_data.get("CommandLine") { - println!("_command_line : {}",_command_line); + println!("_command_line : {}", _command_line); } }