Documentation
¶
Overview ¶
Package injectors writes log documents directly into a SIEM, bypassing detonation.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type ElasticInjector ¶
type ElasticInjector struct {
Documents []ElasticInjectorDocument `json:"documents" yaml:"documents" mapstructure:"documents"`
TemplateCache map[string]string `json:"-" yaml:"-"` // template ID -> decoded content
EnvVars map[string]string `json:"-" yaml:"-"` // run-specific env vars
}
func (*ElasticInjector) String ¶
func (m *ElasticInjector) String() string
type ElasticInjectorDocument ¶
type ElasticInjectorDocument struct {
Index string `json:"index" yaml:"index" mapstructure:"index"`
File string `json:"file,omitempty" yaml:"file,omitempty" mapstructure:"file,omitempty"`
Template string `json:"template,omitempty" yaml:"template,omitempty" mapstructure:"template,omitempty"`
Pack string `json:"pack,omitempty" yaml:"pack,omitempty" mapstructure:"pack,omitempty"`
Vars map[string]string `json:"vars" yaml:"vars" mapstructure:"vars"`
}
Click to show internal directories.
Click to hide internal directories.