dfirence

Hi and thanks for this useful lib. I want to write a function that creates a table dynamically by passing 2 params to the function ```rust pub fn make_table(cols: &[&str],...

[ Missing Api & Constants ] WTSAPI Family

1

Hi, I would like to request coverage for the WTSAPI Family of Functions, Constants, etc. I am using winapi version 0.3.9 - The current support I see avail is **one...

Feature Request: Integrate ATT&CK Navigator Layers

1

@nshalabi - Excellent work and design of a useful utility with SQLITE Requesting you add a feature to integrate a layer from the ATT&CK Navigator onto the tool you have...

Question|Consult: Benignware Emulation of LOLBAS Interpreters

1

Greetings, I love your project and am researching it before I install it. **_This is a question only:_** Can `binee` allow for emulation of the **_Windows Terminals/Consoles apps_** interactively? Specifically...

Greetings I am using 7.9.2 Elastic/Kibana and since Elastic 7.6 several changes have broken Sysmon Search, I have a critical need to use your awesome plugin and am wondering if...

[ Quesion ] Delay Load Imports

2

Does Goblin obtain the "Delay Loaded" imports from `"IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT"`? I see in the source: `https://docs.rs/goblin/latest/goblin/pe/data_directories/struct.DataDirectories.html#method.get_delay_import_descriptor` I assume that when the `IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT` is present in the `PE File` then the developer...

Obtain process token integrity level

5

Greetings, thank you for your awesome sensor. can you extend the `Process` event to have the `integrity levels for the `parent and child process`?

[ Question ] SSE Support

1

Does the lib support Server Sent Events for streaming?

Add flag ‘—To-CSV’ and output formatted CSV to integrate results with other tools in an automated fashion.

Add a cli flag like “—pretty” The output of this flag is formatted as a TABULAR Columns SHA-256 in UpperCase for clarity