vxcontrol/soldr-modules
1
0
Fork 0
mirror of https://github.com/vxcontrol/soldr-modules.git synced 2026-07-18 18:44:30 -04:00
Code Issues 7 Packages Projects Releases 2 Wiki Activity

[PR #48] [MERGED] Bumped windows correlator implementation #47

New Issue
Closed
opened 2026-06-06 22:10:48 -04:00 by yindo · 0 comments
yindo commented 2026-06-06 22:10:48 -04:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/vxcontrol/soldr-modules/pull/48
Author: @asdek
Created: 5/24/2023
Status: ✅ Merged
Merged: 5/24/2023
Merged by: @asdek

Base: master ← Head: bugfix/win_correlator

📝 Commits (2)

  • 39c72a5 fix: update correlator bundle to avoid issue with running it on windows 10 22H2
  • b3ce04b fix: bump correlator last update field to the latest version

📊 Changes

16 files changed (+253 additions, -27 deletions)

View changed files

📝 config.json (+2 -2)
📝 correlator/1.0.0/cmodule/clibs/windows/amd64/CorrelationInterface.dll (+0 -0)
📝 correlator/1.0.0/cmodule/clibs/windows/amd64/correlator-module.dll (+0 -0)
➕ correlator/1.0.0/cmodule/clibs/windows/amd64/libcrypto-1_1-x64.dll (+0 -0)
➕ correlator/1.0.0/cmodule/clibs/windows/amd64/libssl-1_1-x64.dll (+0 -0)
📝 correlator/1.0.0/cmodule/clibs/windows/amd64/log4cplus.dll (+0 -0)
📝 correlator/1.0.0/cmodule/clibs/windows/amd64/normalizer-module.dll (+0 -0)
📝 correlator/1.0.0/cmodule/engines/acts_engine.lua (+130 -8)
📝 correlator/1.0.0/cmodule/engines/corr_engine.lua (+7 -7)
📝 correlator/1.0.0/cmodule/main.lua (+1 -0)
📝 correlator/1.0.0/cmodule/module.lua (+4 -5)
📝 correlator/1.0.0/config/config_schema.json (+90 -1)
📝 correlator/1.0.0/config/current_config.json (+3 -1)
📝 correlator/1.0.0/config/default_config.json (+3 -1)
📝 correlator/1.0.0/config/locale.json (+12 -1)
📝 correlator/1.0.0/smodule/main.lua (+1 -1)

📄 Description

Description of the Change

How to test the Change

Changelog Entry

Added - Mechanism for excludes correlator events according to user config in the policy and receiving raw events from topic by default
Changed - Dynamic libraries inside module
Deprecated - Soon-to-be removed feature

Checklist:

  • I have updated the documentation accordingly.
  • I have added tests to cover my change.
  • All new and existing tests pass.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/vxcontrol/soldr-modules/pull/48 **Author:** [@asdek](https://github.com/asdek) **Created:** 5/24/2023 **Status:** ✅ Merged **Merged:** 5/24/2023 **Merged by:** [@asdek](https://github.com/asdek) **Base:** `master` ← **Head:** `bugfix/win_correlator` --- ### 📝 Commits (2) - [`39c72a5`](https://github.com/vxcontrol/soldr-modules/commit/39c72a5577497b865d06368f1bd4d1af74eb8348) fix: update correlator bundle to avoid issue with running it on windows 10 22H2 - [`b3ce04b`](https://github.com/vxcontrol/soldr-modules/commit/b3ce04b5c6ce90b22bd17e8bf29b1188def2790d) fix: bump correlator last update field to the latest version ### 📊 Changes **16 files changed** (+253 additions, -27 deletions) <details> <summary>View changed files</summary> 📝 `config.json` (+2 -2) 📝 `correlator/1.0.0/cmodule/clibs/windows/amd64/CorrelationInterface.dll` (+0 -0) 📝 `correlator/1.0.0/cmodule/clibs/windows/amd64/correlator-module.dll` (+0 -0) ➕ `correlator/1.0.0/cmodule/clibs/windows/amd64/libcrypto-1_1-x64.dll` (+0 -0) ➕ `correlator/1.0.0/cmodule/clibs/windows/amd64/libssl-1_1-x64.dll` (+0 -0) 📝 `correlator/1.0.0/cmodule/clibs/windows/amd64/log4cplus.dll` (+0 -0) 📝 `correlator/1.0.0/cmodule/clibs/windows/amd64/normalizer-module.dll` (+0 -0) 📝 `correlator/1.0.0/cmodule/engines/acts_engine.lua` (+130 -8) 📝 `correlator/1.0.0/cmodule/engines/corr_engine.lua` (+7 -7) 📝 `correlator/1.0.0/cmodule/main.lua` (+1 -0) 📝 `correlator/1.0.0/cmodule/module.lua` (+4 -5) 📝 `correlator/1.0.0/config/config_schema.json` (+90 -1) 📝 `correlator/1.0.0/config/current_config.json` (+3 -1) 📝 `correlator/1.0.0/config/default_config.json` (+3 -1) 📝 `correlator/1.0.0/config/locale.json` (+12 -1) 📝 `correlator/1.0.0/smodule/main.lua` (+1 -1) </details> ### 📄 Description <!-- Filling out this template is required. Any PR that does not include enough information to be reviewed may be closed at a maintainers' discretion. --> ### Description of the Change <!-- We must be able to understand the design of your change from this description. The maintainer reviewing this PR may not have worked with this code recently, so please provide as much detail as possible. Where possible, please also include: - verification steps to ensure your change has the desired effects and has not introduced any regressions - any benefits that will be realized - any alternative implementations or possible drawbacks that you considered - screenshots or screencasts --> ### How to test the Change <!-- Please provide steps on how to test or validate that the change in this PR works as described. --> ### Changelog Entry <!-- Please include a summary for this PR, noting whether this is something being Added / Changed / Deprecated / Removed / Fixed / or Security related. You can replace the sample entries after this comment block with the single changelog entry line for this PR. --> > Added - Mechanism for excludes correlator events according to user config in the policy and receiving raw events from topic by default > Changed - Dynamic libraries inside module > Deprecated - Soon-to-be removed feature ### Checklist: <!--- Go over all the following points, and put an `x` in all the boxes that apply. --> <!--- If you are unsure about any of these, please ask for clarification. We are here to help! --> - [ ] I have updated the documentation accordingly. - [ ] I have added tests to cover my change. - [x] All new and existing tests pass. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-06-06 22:10:48 -04:00
yindo closed this issue 2026-06-06 22:10:48 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
darwin
documentation
enhancement
file_reader
file_reader
file_remover
file_uloader
file_uloader
linux
osquery
proc_terminator
pull-request
Mirrored from GitHub Pull Request
 shell
shell
sysmon
tests
windows
windows
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: vxcontrol/soldr-modules#47
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?