admin/pathtofile-Sealighter
1
0
Fork 0
mirror of https://github.com/pathtofile/Sealighter synced 2026-06-08 16:41:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

moved refrences from SolutionDir to ProjectDir to make sealighter more portable

Browse Source
This commit is contained in:
pathtofile
2021-05-10 21:42:07 +10:00
parent 6218f96947
commit 2985c12026
4 changed files with 22 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitignore
+1
View File
@@ -9,3 +9,4 @@ sealighter/x64
out.json
run.bat
config.json
test_sealighter_provider.man
example_config.json
+1 -2
View File
@@ -1,8 +1,7 @@
{
"session_properties": {
"session_name": "Sealighter-Trace",
"output_format": "stdout",
"buffering_timout_seconds": 10
"output_format": "stdout"
},
"user_traces": [
{
example_config_event_log.json
+18
View File
@@ -0,0 +1,18 @@
{
"session_properties": {
"session_name": "Sealighter-Trace",
"output_format": "event_log"
},
"user_traces": [
{
"trace_name": "ProcTrace01",
"provider_name": "Microsoft-Windows-Kernel-Process",
"keywords_any": 16,
"filters": {
"any_of": {
"event_id_is": [ 1, 2 ]
}
}
}
]
}
sealighter/sealighter.vcxproj
+2 -4
View File
@@ -62,12 +62,11 @@
<SDLCheck>true</SDLCheck>
<PreprocessorDefinitions>_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
<ConformanceMode>true</ConformanceMode>
<AdditionalIncludeDirectories>$(SolutionDir)krabsetw\krabs;$(SolutionDir)krabsetw\Microsoft.O365.Security.Native.ETW;$(SolutionDir)packages\boost.1.68.0.0\lib\native\include;$(SolutionDir)json\single_include</AdditionalIncludeDirectories>
<AdditionalIncludeDirectories>$(ProjectDir)..\krabsetw\krabs;$(ProjectDir)..\krabsetw\Microsoft.O365.Security.Native.ETW;$(ProjectDir)..\json\single_include</AdditionalIncludeDirectories>
</ClCompile>
<Link>
<SubSystem>Console</SubSystem>
<GenerateDebugInformation>true</GenerateDebugInformation>
<AddModuleNamesToAssembly>$(SolutionDir)manifest\event_log.res</AddModuleNamesToAssembly>
</Link>
<PreBuildEvent>
<Command>
@@ -84,14 +83,13 @@
<SDLCheck>true</SDLCheck>
<PreprocessorDefinitions>NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
<ConformanceMode>true</ConformanceMode>
<AdditionalIncludeDirectories>$(SolutionDir)krabsetw\krabs;$(SolutionDir)krabsetw\Microsoft.O365.Security.Native.ETW;$(SolutionDir)packages\boost.1.68.0.0\lib\native\include;$(SolutionDir)json\single_include</AdditionalIncludeDirectories>
<AdditionalIncludeDirectories>$(ProjectDir)..\krabsetw\krabs;$(ProjectDir)..\krabsetw\Microsoft.O365.Security.Native.ETW;$(ProjectDir)..\json\single_include</AdditionalIncludeDirectories>
</ClCompile>
<Link>
<SubSystem>Console</SubSystem>
<EnableCOMDATFolding>true</EnableCOMDATFolding>
<OptimizeReferences>true</OptimizeReferences>
<GenerateDebugInformation>true</GenerateDebugInformation>
<AddModuleNamesToAssembly>$(SolutionDir)manifest\event_log.res</AddModuleNamesToAssembly>
</Link>
<PreBuildEvent>
<Command>