Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New encode transformer #43

Open
rabbitstack opened this issue Jan 11, 2021 · 0 comments
Open

New encode transformer #43

rabbitstack opened this issue Jan 11, 2021 · 0 comments
Labels
needs: config Indicates the issue requires changes in the config file/flags needs: docs Indicates that the issue needs documentation updates scope: transformers Anything related to transformers

Comments

@rabbitstack
Copy link
Owner

This transformer should be in charge of encoding the event params by using the specific data encoding algorithm. Users should be able to choose between hex, base64, and maybe asn1 encoders. The encode transformer should have the ability to filter out unwanted events and thus minimize the impact on performance in case of high event throughput.

Example config:

transformers:
     encode:
         encoder: base64
         enabled: true
         condition: kevt.name = 'RegSetValue' and registry.value.type = 'REG_BINARY'
         kparams:
            - registry.value
@rabbitstack rabbitstack added needs: docs Indicates that the issue needs documentation updates needs: config Indicates the issue requires changes in the config file/flags scope: transformers Anything related to transformers labels Jan 11, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs: config Indicates the issue requires changes in the config file/flags needs: docs Indicates that the issue needs documentation updates scope: transformers Anything related to transformers
Projects
None yet
Development

No branches or pull requests

1 participant