vxcontrol/soldr-modules
1
0
Fork 0
mirror of https://github.com/vxcontrol/soldr-modules.git synced 2026-07-18 18:44:30 -04:00
Code Issues 7 Packages Projects Releases 2 Wiki Activity

[PR #31] [CLOSED] New module: wel #32

New Issue
Closed
opened 2026-06-06 22:10:44 -04:00 by yindo · 0 comments
yindo commented 2026-06-06 22:10:44 -04:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/vxcontrol/soldr-modules/pull/31
Author: @souz9
Created: 12/16/2022
Status: ❌ Closed

Base: master ← Head: wel

📝 Commits (1)

📊 Changes

33 files changed (+1020 additions, -0 deletions)

View changed files

➕ wel/1.0.0/bmodule/main.vue (+15 -0)
➕ wel/1.0.0/cmodule/args.json (+1 -0)
➕ wel/1.0.0/cmodule/clibs/windows/386/sys/log4cplus.dll (+0 -0)
➕ wel/1.0.0/cmodule/clibs/windows/386/sys/msvcp140.dll (+0 -0)
➕ wel/1.0.0/cmodule/clibs/windows/386/sys/vcruntime140.dll (+0 -0)
➕ wel/1.0.0/cmodule/clibs/windows/386/sys/wineventlog.dll (+0 -0)
➕ wel/1.0.0/cmodule/clibs/windows/amd64/sys/log4cplus.dll (+0 -0)
➕ wel/1.0.0/cmodule/clibs/windows/amd64/sys/msvcp140.dll (+0 -0)
➕ wel/1.0.0/cmodule/clibs/windows/amd64/sys/vcruntime140.dll (+0 -0)
➕ wel/1.0.0/cmodule/clibs/windows/amd64/sys/vcruntime140_1.dll (+0 -0)
➕ wel/1.0.0/cmodule/clibs/windows/amd64/sys/wineventlog.dll (+0 -0)
➕ wel/1.0.0/cmodule/events_.lua (+30 -0)
➕ wel/1.0.0/cmodule/main.lua (+40 -0)
➕ wel/1.0.0/cmodule/module.lua (+375 -0)
➕ wel/1.0.0/cmodule/reader_.lua (+125 -0)
➕ wel/1.0.0/cmodule/receivers.lua (+25 -0)
➕ wel/1.0.0/config/action_config_schema.json (+6 -0)
➕ wel/1.0.0/config/changelog.json (+14 -0)
➕ wel/1.0.0/config/config_schema.json (+129 -0)
➕ wel/1.0.0/config/current_action_config.json (+1 -0)

...and 13 more files

📄 Description

This is a refactored version of wineventlog module.

  • The logic sending to external systems (syslog, amqp, ...) has been fully removed from the module.
  • Instead, each entry from Windows Events journal is emited as a security event. So any other module is able to "subscribe" to this type of events and use it as input.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/vxcontrol/soldr-modules/pull/31 **Author:** [@souz9](https://github.com/souz9) **Created:** 12/16/2022 **Status:** ❌ Closed **Base:** `master` ← **Head:** `wel` --- ### 📝 Commits (1) - [`9e55fd0`](https://github.com/vxcontrol/soldr-modules/commit/9e55fd0f3ed2864b56dceea4ba68499cae1c1d47) New module: wel ### 📊 Changes **33 files changed** (+1020 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `wel/1.0.0/bmodule/main.vue` (+15 -0) ➕ `wel/1.0.0/cmodule/args.json` (+1 -0) ➕ `wel/1.0.0/cmodule/clibs/windows/386/sys/log4cplus.dll` (+0 -0) ➕ `wel/1.0.0/cmodule/clibs/windows/386/sys/msvcp140.dll` (+0 -0) ➕ `wel/1.0.0/cmodule/clibs/windows/386/sys/vcruntime140.dll` (+0 -0) ➕ `wel/1.0.0/cmodule/clibs/windows/386/sys/wineventlog.dll` (+0 -0) ➕ `wel/1.0.0/cmodule/clibs/windows/amd64/sys/log4cplus.dll` (+0 -0) ➕ `wel/1.0.0/cmodule/clibs/windows/amd64/sys/msvcp140.dll` (+0 -0) ➕ `wel/1.0.0/cmodule/clibs/windows/amd64/sys/vcruntime140.dll` (+0 -0) ➕ `wel/1.0.0/cmodule/clibs/windows/amd64/sys/vcruntime140_1.dll` (+0 -0) ➕ `wel/1.0.0/cmodule/clibs/windows/amd64/sys/wineventlog.dll` (+0 -0) ➕ `wel/1.0.0/cmodule/events_.lua` (+30 -0) ➕ `wel/1.0.0/cmodule/main.lua` (+40 -0) ➕ `wel/1.0.0/cmodule/module.lua` (+375 -0) ➕ `wel/1.0.0/cmodule/reader_.lua` (+125 -0) ➕ `wel/1.0.0/cmodule/receivers.lua` (+25 -0) ➕ `wel/1.0.0/config/action_config_schema.json` (+6 -0) ➕ `wel/1.0.0/config/changelog.json` (+14 -0) ➕ `wel/1.0.0/config/config_schema.json` (+129 -0) ➕ `wel/1.0.0/config/current_action_config.json` (+1 -0) _...and 13 more files_ </details> ### 📄 Description This is a refactored version of wineventlog module. - The logic sending to external systems (syslog, amqp, ...) has been fully removed from the module. - Instead, each entry from Windows Events journal is emited as a security event. So any other module is able to "subscribe" to this type of events and use it as input. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-06-06 22:10:44 -04:00
yindo closed this issue 2026-06-06 22:10:44 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
darwin
documentation
enhancement
file_reader
file_reader
file_remover
file_uloader
file_uloader
linux
osquery
proc_terminator
pull-request
Mirrored from GitHub Pull Request
 shell
shell
sysmon
tests
windows
windows
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: vxcontrol/soldr-modules#32
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?