valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 09:48:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #1446 from secDre4mer/master

Browse Source 
fix: Distinguish Windows and Linux logfiles by path separator
This commit is contained in:
Florian Roth 2021-04-28 13:26:32 +02:00 committed by GitHub
commit 544994dba1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
tools/config/thor.yml
View File

@ -222,11 +222,13 @@ logsources:
sources:
- "File:/var/log/syslog"
- "File:/var/log/syslog.?"
linux-log:
linux-logfile:
product: linux
sources:
- "File:*.log"
logfiles:
category: logfile
sources:
- "File:*.log"
- "File:/*.log"
windows-logfile:
product: windows
category: logfile
sources:
- "File:?:\\*.log"