Add support for `parent_name` in definition files - Githubissues

redcanaryco / surveyor

A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.

MIT License

166 stars 62 forks source link

Add support for `parent_name` in definition files #139

Open rc-csmith opened 11 months ago

rc-csmith commented 11 months ago

Changes

Added support for parent_name definition file field in all product files
Added support for filemod and modload in vmware_cb_enterprise_edr.py
Updated spec tests to include new definition file field
Consolidated test data into single file
Fix bug in vmware_cb_enterprise_edr.py to properly record full query

Closes #122 Closes #131