rabbitstack / fibratus

Adversary tradecraft detection, protection, and hunting
https://www.fibratus.io
Other
2.21k stars 189 forks source link

feat(alertsender): Introduce eventlog alertsender #337

Closed N0vaSky closed 3 weeks ago

N0vaSky commented 3 weeks ago

What is the purpose of this PR / why it is needed?

The eventlog alertsender emits the alerts to the eventlog. By default, the message is a combination of alert title and text. The severity of the eventlog message is determined by the alert severity. The eventlog alert sender is enabled by default.

What type of change does this PR introduce?

Mark the option with the x symbol inside the brackets. Trim leading/trailing white spaces. Remove any options that don't apply to your changeset.

Any specific area of the project related to this PR?

Mark the option with the x symbol inside the brackets. Trim leading/trailing white spaces. Remove any options that don't apply to your changeset.

Special notes for the reviewer:

Does this PR introduce a user-facing change?

The users will have the ability to send alerts to the event log. The alert sender is enabled by default along with the systray sender.