From ba94b8396c263a4640f405697fdb7ee6e6f92bdb Mon Sep 17 00:00:00 2001
From: Florian Roth <florian.roth@nextron-systems.com>
Date: Fri, 2 Jul 2021 14:14:48 +0200
Subject: [PATCH] config: thor - powershell classic

---
 tools/config/thor.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/tools/config/thor.yml b/tools/config/thor.yml
index 0dbaf033..0b18661b 100644
--- a/tools/config/thor.yml
+++ b/tools/config/thor.yml
@@ -176,6 +176,11 @@ logsources:
     service: powershell
     sources:
       - "WinEventLog:Microsoft-Windows-PowerShell/Operational"
+  windows-classicpowershell:
+    product: windows
+    service: powershell-classic
+    sources: 
+      - "WinEventLog:Windows PowerShell"
   windows-taskscheduler:
     product: windows
     service: taskscheduler