Add GitHub Workflow to automatically run tests for pull requests/pushes to any branch
Caveats that need to be documented:
Unlike prior versions, this allows users to provide a complete query without any constraints. That being said, there are four required field names that must be projected in those user-defined queries otherwise the resulting CSV will be empty or have incomplete data:
DeviceName
AccountName or InitiatingProcessAccountName
ProcessCommandLine or InitiatingProcessCommandLine
FolderPath or InitatingProcessFolderPath
Users can now specify either a token or the tenantID, clientID, and clientSecret in the credential file
Changes
build_query()
formats supported filter options correctlybuild_query()
gracefully handles unsupported filter optionsprocess_search()
does not alter the given querynested_process_search()
parses a definition file as expectednested_process_search()
gracefully handles unsupported definition file fieldsprocess_search()
correctly appends filter optionsCaveats that need to be documented:
DeviceName
AccountName
orInitiatingProcessAccountName
ProcessCommandLine
orInitiatingProcessCommandLine
FolderPath
orInitatingProcessFolderPath
token
or thetenantID
,clientID
, andclientSecret
in the credential fileCloses #99
Closes #109
Related to #81