Remote file copy identical results grouped

This commit is contained in:
VakarisZ 2019-07-10 09:00:01 +03:00
parent a91421aaf0
commit e1baacd0f0
1 changed files with 3 additions and 1 deletions

View File

@ -16,7 +16,9 @@ class T1105(AttackTechnique):
{'$project': {'_id': 0, {'$project': {'_id': 0,
'src': '$data.src', 'src': '$data.src',
'dst': '$data.dst', 'dst': '$data.dst',
'filename': '$data.filename'}}] 'filename': '$data.filename'}},
{'$group': {'_id': {'src': '$src', 'dst': '$dst', 'filename': '$filename'}}},
{"$replaceRoot": {"newRoot": "$_id"}}]
@staticmethod @staticmethod
def get_report_data(): def get_report_data():