Mirrors/SocFortress-Wazuh-Rules
1
0
Fork 0
mirror of https://github.com/socfortress/Wazuh-Rules.git synced 2025-12-22 10:57:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create crowdstrike.sh

Browse Source
This commit is contained in:
SOCFortress
2022-08-20 09:55:05 -05:00
committed by GitHub
parent 7d9955ea30
commit f007a9f8dd
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
Crowdstrike/crowdstrike.sh Normal file
View File

@@ -0,0 +1,11 @@
#!/bin/bash
results_file=/tmp/crowdstrike.json
current_file=/tmp/crowdstrike_run.json
output_file=/tmp/crowdstrike_results.json
compare_file=/tmp/crowdstrike_compare.json
/usr/bin/cat /var/log/crowdstrike/falconhoseclient/output | /usr/bin/jq -c '.' > $current_file
/usr/bin/diff -u $compare_file $current_file > /tmp/results.patch
/usr/bin/patch $results_file /tmp/results.patch
/usr/bin/mv $current_file $compare_file