Skip to content

Commit 839c963

Browse files
cosmo0920edsiper
authored andcommitted
in_winevtlog: Add a describing link for capability SIDs
Signed-off-by: Hiroshi Hatake <[email protected]>
1 parent 05a7e3a commit 839c963

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

plugins/in_winevtlog/pack.c

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -278,7 +278,8 @@ static int pack_sid(struct winevtlog_config *ctx, PSID sid, int extract_sid)
278278
if (ConvertSidToStringSidW(sid, &wide_sid)) {
279279
if (extract_sid == FLB_TRUE) {
280280
/* Skip to translate SID for capability SIDs.
281-
* see also: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-identifiers
281+
* ref: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-identifiers
282+
* See also: https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/sids-not-resolve-into-friendly-names
282283
*/
283284
if (wcsnicmp(wide_sid, L"S-1-15-3-", 9) == 0) {
284285
flb_plg_debug(ctx->ins, "This SID is one of the capability SIDs. Skip.");

0 commit comments

Comments
 (0)