add test file #165
This commit is contained in:
13
test_files/config/default_profile.txt
Normal file
13
test_files/config/default_profile.txt
Normal file
@@ -0,0 +1,13 @@
|
||||
Timestamp: '%Timestamp%'
|
||||
Computer: '%Computer%'
|
||||
Channel: '%Channel%'
|
||||
Level: '%Level%'
|
||||
EventID: '%EventID%'
|
||||
MitreAttack: '%MitreAttack%'
|
||||
RecordID: '%RecordID%'
|
||||
RuleTitle: '%RuleTitle%'
|
||||
Details: '%Details%'
|
||||
RecordInformation: '%RecordInformation%'
|
||||
RuleFile: '%RuleFile%'
|
||||
EvtxFile: '%EvtxFile%'
|
||||
Tags: '%MitreAttack%'
|
||||
44
test_files/config/profiles.txt
Normal file
44
test_files/config/profiles.txt
Normal file
@@ -0,0 +1,44 @@
|
||||
minimal:
|
||||
Timestamp: '%Timestamp%'
|
||||
Computer: '%Computer%'
|
||||
Channel: '%Channel%'
|
||||
EventID: '%EventID%'
|
||||
Level: '%Level%'
|
||||
RuleTitle: '%RuleTitle%'
|
||||
Details: '%Details%'
|
||||
|
||||
default:
|
||||
Timestamp: '%Timestamp%'
|
||||
Computer: '%Computer%'
|
||||
Channel: '%Channel%'
|
||||
EventID: '%EventID%'
|
||||
Level: '%Level%'
|
||||
Tags: '%MitreAttack%'
|
||||
RecordID: '%RecordID%'
|
||||
RuleTitle: '%RuleTitle%'
|
||||
Details: '%Details%'
|
||||
|
||||
verbose-1:
|
||||
Timestamp: '%Timestamp%'
|
||||
Computer: '%Computer%'
|
||||
Channel: '%Channel%'
|
||||
EventID: '%EventID%'
|
||||
Level: '%Level%'
|
||||
Tags: '%MitreAttack%'
|
||||
RecordID: '%RecordID%'
|
||||
RuleTitle: '%RuleTitle%'
|
||||
Details: '%Details%'
|
||||
RulePath: '%RulePath%'
|
||||
FilePath: '%FilePath%'
|
||||
|
||||
verbose-2:
|
||||
Timestamp: '%Timestamp%'
|
||||
Computer: '%Computer%'
|
||||
Channel: '%Channel%'
|
||||
EventID: '%EventID%'
|
||||
Level: '%Level%'
|
||||
Tags: '%MitreAttack%'
|
||||
RecordID: '%RecordID%'
|
||||
RuleTitle: '%RuleTitle%'
|
||||
Details: '%Details%'
|
||||
AllFieldInfo: '%RecordInformation%'
|
||||
Reference in New Issue
Block a user