mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
David Dorsey
3d25c40bf7
Broke out macros definition into it's own manifest Created macro manifests for all of current macros that we ship Created lookup file manifest Created lookup file manifests for all current lookup files that we ship
6 lines
283 B
JSON
6 lines
283 B
JSON
{
|
|
"definition": "lookup update=true isWindowsSystemFile_lookup filename as process_name OUTPUT systemFile | search systemFile=true",
|
|
"description": "This macro limits the output to process names that are in the Windows System directory",
|
|
"name": "isWindowsSystemFile"
|
|
}
|