mirror of
https://github.com/pathtofile/Sealighter
synced 2026-06-08 16:41:39 +00:00
path/to/file
28 lines
736 B
JSON
28 lines
736 B
JSON
{
|
|
"session_properties": {
|
|
"session_name": "Sealighter-Trace",
|
|
"output_format": "stdout",
|
|
"buffering_timout_seconds": 10
|
|
},
|
|
"user_traces": [
|
|
{
|
|
"trace_name": "ProcTrace01",
|
|
"provider_name": "Microsoft-Windows-Kernel-Process",
|
|
"keywords_any": 16,
|
|
"filters": {
|
|
"any_of": {
|
|
"event_id_is": [ 1, 2 ]
|
|
}
|
|
},
|
|
"buffers": [
|
|
{
|
|
"event_id": 1,
|
|
"max_before_buffering": 10,
|
|
"properties_to_match": [
|
|
"ImageName"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
} |