fibratus.yml

image_meta:
  enabled: false
  imports: false
  file_info: false

skips:
  images:
    - svchost.exe
    - smss.exe
    - services.exe
    - taskmgr.exe
    - dwm.exe
    - vprot.exe
    - lsass.exe
    - sihost.exe
    - system

output:
  - console:
      format: pretty
#  - amqp:
#      host: 127.0.0.1
#      port: 5672
#      username: guest
#      password: guest
#      vhost: /
#      exchange: amq.direct
#      routingkey: fibratus
#  - smtp:
#      host: smtp.gmail.com
#      port: 587
#      from: info@github.io
#      password: secret
#      to:
#        - fibratus@github.io
#        - netmutatus@github.io
#  - elasticsearch:
#      hosts:
#        - localhost:9200
#      index: kernelstream
#      index_type: daily
#      daily_index_format: %Y.%m.%d
#      document: threads
#      bulk: False
#      username: elastic
#      password: changeme
#      ssl: True
#  - fs:
#      path: D:\\
#      mode: a
#      format: json

#binding:
#  - yara:
#      path: D:\yara-rules