diff --git a/mapping-examples/security-datasets/GoldenSAML/README.md b/mapping-examples/security-datasets/GoldenSAML/README.md index de18c4d0..2b20a97a 100644 --- a/mapping-examples/security-datasets/GoldenSAML/README.md +++ b/mapping-examples/security-datasets/GoldenSAML/README.md @@ -8,7 +8,9 @@ Tha dataset is in turn based on Microsoft's SimuLand Golden SAML Lab Guide (http ### Data Ingestion -TODO +``` +kestrel-tool mkdb --db sqlite:///golden_saml.db --table WindowsEvents WindowsEvents.json +``` ### Data Source Configuration diff --git a/packages/kestrel_core/src/kestrel/frontend/kestrel.lark b/packages/kestrel_core/src/kestrel/frontend/kestrel.lark index 654de406..a4a0bec8 100644 --- a/packages/kestrel_core/src/kestrel/frontend/kestrel.lark +++ b/packages/kestrel_core/src/kestrel/frontend/kestrel.lark @@ -176,7 +176,6 @@ NUNIQUE: "NUNIQUE"i datasource: DATASRC_SIMPLE | DATASRC_ESCAPED - | VARIABLE DATASRC_SIMPLE: PATH_SIMPLE ("," PATH_SIMPLE)* DATASRC_ESCAPED: PATH_ESCAPED