Project

General

Profile

Download (2.83 KB)

Bug #20784 » bob.json

Nicolas CHARLES, 2022-02-17 16:51

 
{
"type": "ncf_technique",
"version": "3.0",
"data": {
"id": "bob",
"version": "1.0",
"name": "Bob",
"description": "",
"category": "fileConfiguration",
"parameter": [],
"calls": [
{
"reportingLogic": {
"type": "focus",
"value": "c841e981-c6a8-419a-87c2-fc9f3e35f1b8"
},
"condition": "",
"component": "bob",
"calls": [
{
"component": "Command execution",
"id": "c841e981-c6a8-419a-87c2-fc9f3e35f1b8",
"method": "command_execution",
"condition": "",
"parameters": [
{
"name": "command",
"value": "/bin/true"
}
],
"disableReporting": false
},
{
"component": "Command execution",
"id": "e36bc58d-a30e-4b0c-84a7-eceaa07ff7a1",
"method": "command_execution",
"condition": "",
"parameters": [
{
"name": "command",
"value": "/bin/false"
}
],
"disableReporting": false
},
{
"component": "bob",
"id": "76eacd5b-39f6-4b67-acea-77f3deaf183a",
"method": "audit_from_osquery",
"condition": "",
"parameters": [
{
"name": "query",
"value": "sfsfsf"
},
{
"name": "comparator",
"value": "="
},
{
"name": "value",
"value": "12"
}
],
"disableReporting": true
}
],
"id": "b9b29826-0c41-4671-932d-f80c20f79443"
},
{
"component": "Variable string",
"id": "68e22fc3-6726-4b9c-a3a0-c14e7f832a3e",
"method": "variable_string",
"condition": "command_execution__bin_true_repaired",
"parameters": [
{
"name": "prefix",
"value": "myvar"
},
{
"name": "name",
"value": "value"
},
{
"name": "value",
"value": "12"
}
],
"disableReporting": true
},
{
"component": "Variable string",
"id": "7fd98e7f-a0e7-4803-a029-f64015cdf597",
"method": "variable_string",
"condition": "command_execution__bin_true_kept",
"parameters": [
{
"name": "prefix",
"value": "myvar"
},
{
"name": "name",
"value": "value"
},
{
"name": "value",
"value": "54"
}
],
"disableReporting": true
}
],
"resources": []
}
}
(3-3/3)