Lack of display output 1st field name in AllFieldInfo

一つだけ、AllFieldInfo出力にプチバグがあるようです。 -P verbose-details-and-all-field-infoでOpenSOC Challenge 1で試したら、AllFieldInfoの最初のフィールド名が無くなっています：

  {
    "Timestamp": "2022-08-05 14:53:10.727 +09:00",
    "Computer": "ACC-04.corp.net",
    "Channel": "NTLM",
    "EventID": 8002,
    "Level": "low",
    "MitreTactics": [
      "LatMov"
    ],
    "MitreTags": [
      "T1550.002"
    ],
    "RecordID": 219,
    "RuleTitle": "NTLM Logon",
    "CallerPID": 748,
    "ClientDomainName": "CORP",
    "ClientLUID": "0x3e4",
    "ClientUserName": "ACC-04$",
    "MechanismOID": "(NULL)",
    "ProcessName": "C:\\Windows\\System32\\svchost.exe",
    "RuleFile": "win_susp_ntlm_auth.yml",
    "EvtxFile": "../勉強会/2022/OpenSOC/Challenge 1/clients/ACC-04/collections/F.CBMRA1U29Q25I/uploads/auto/C%3A/Windows/System32/winevt/Logs/Microsoft-Windows-NTLM%254Operational.evtx",
    "AllFieldInfo": "748 ¦ ClientDomainName: CORP ¦ ClientLUID: 0x3e4 ¦ ClientUserName: ACC-04$ ¦ MechanismOID: (NULL) ¦ ProcessName: C:\\Windows\\System32\\svchost.exe"
  }

"748 ¦から始まっていますが、CallerPID: 748から始まるはずですよね？

(hayabusa-sample-evtxでも同じように最初のフィールド名がありません。）

Originally posted by @YamatoSecurity in https://github.com/Yamato-Security/hayabusa/issues/670#issuecomment-1245369482

Yamato-Security / hayabusa

Lack of display output 1st field name in AllFieldInfo #697