config

Documentation

Index

• Variables
• func Init() error
• func ReadIOCs(iocFile string, iocs interface{}) error

Variables

var (
	Paths         simpleStringSlice
	MaxFileSize   = fileSize(32 * 1024 * 1024)
	ReportTargets = simpleStringSlice([]string{"spyre.log"})
	Hostname      string
	HighPriority  bool
	YaraFiles     simpleStringSlice
	IocFiles      simpleStringSlice
)

var Fs afero.Fs

Fs is the "filesystem" in which configuration and rules are found. This can be provided through a ZIP file appended to the binary.

Functions

func Init

func Init() error

func ReadIOCs

func ReadIOCs(iocFile string, iocs interface{}) error

ReadIOCs reads IOCs from iocFile into iocs. iocs is typically a struct with a single member, most likely string-based map or slice, which is tagged with the name of a subkey.

Example:

type iocs struct {
	EventObjects []keyIOC `json:"registry-keys"`
}

type keyIOC struct { ... }