From a7543c3cb61c56b2a32873a0e9dbe0e82aaae4b0 Mon Sep 17 00:00:00 2001 From: Xiaokui Shu Date: Tue, 30 Jul 2024 10:37:06 -0400 Subject: [PATCH 1/2] remove variable syntax from GET FROM --- packages/kestrel_core/src/kestrel/frontend/kestrel.lark | 1 - 1 file changed, 1 deletion(-) diff --git a/packages/kestrel_core/src/kestrel/frontend/kestrel.lark b/packages/kestrel_core/src/kestrel/frontend/kestrel.lark index 654de406..a4a0bec8 100644 --- a/packages/kestrel_core/src/kestrel/frontend/kestrel.lark +++ b/packages/kestrel_core/src/kestrel/frontend/kestrel.lark @@ -176,7 +176,6 @@ NUNIQUE: "NUNIQUE"i datasource: DATASRC_SIMPLE | DATASRC_ESCAPED - | VARIABLE DATASRC_SIMPLE: PATH_SIMPLE ("," PATH_SIMPLE)* DATASRC_ESCAPED: PATH_ESCAPED From 4d48ffc22e0cca6d7c5d38be28b5ec4194e6d011 Mon Sep 17 00:00:00 2001 From: Xiaokui Shu Date: Tue, 30 Jul 2024 10:39:47 -0400 Subject: [PATCH 2/2] add ingestion for README --- mapping-examples/security-datasets/GoldenSAML/README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/mapping-examples/security-datasets/GoldenSAML/README.md b/mapping-examples/security-datasets/GoldenSAML/README.md index de18c4d0..2b20a97a 100644 --- a/mapping-examples/security-datasets/GoldenSAML/README.md +++ b/mapping-examples/security-datasets/GoldenSAML/README.md @@ -8,7 +8,9 @@ Tha dataset is in turn based on Microsoft's SimuLand Golden SAML Lab Guide (http ### Data Ingestion -TODO +``` +kestrel-tool mkdb --db sqlite:///golden_saml.db --table WindowsEvents WindowsEvents.json +``` ### Data Source Configuration