Explore the Idea of Search_Rule Comments in Log_of_interest output

ceramicskate0 / SWELF

Simple Windows Event Log Forwarder (SWELF). Its easy to use/simply works Log Forwarder and EVTX Parser. Almost in full release here at https://github.com/ceramicskate0/SWELF/releases/latest.

https://ceramicskate0.github.io/SWELF/

GNU Affero General Public License v3.0

24 stars 7 forks source link

Explore the Idea of Search_Rule Comments in Log_of_interest output #98

Open ceramicskate0 opened 5 years ago

ceramicskate0 commented 5 years ago

Most engines like SWELF have the ability to output logs with comments about the rule. SWELF currently does not.