reg2es 2.2.1__tar.gz → 2.2.2__tar.gz

{reg2es-2.2.1 → reg2es-2.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: reg2es
-Version: 2.2.1
+Version: 2.2.2
 Summary: A fast library for parsing and importing Windows NT Registry(REGF) into Elasticsearch.
 Author-email: sumeshi <j15322sn@gmail.com>
 License-Expression: MIT
@@ -172,8 +172,7 @@ result: list[dict] = reg2json(
 
 ## Output Format Example
 
-Each plugin result becomes one document with `ecs.version` set to `8.17.0`.
-Standard `event`,
+Each plugin result becomes one document. Standard `event`,
 `registry`, `log.file`, `tags`, and `@timestamp` fields describe the artifact.
 Lossless plugin-specific data and the original offline-hive location are kept
 under `reg2es`.
@@ -191,7 +190,6 @@ these fields; use a new index for the updated output.
 
 ```json
 {
-  "ecs": {"version": "8.17.0"},
   "@timestamp": "2015-10-30T07:24:57.814133+00:00",
   "event": {
     "kind": "event",

{reg2es-2.2.1 → reg2es-2.2.2}/README.md

@@ -156,8 +156,7 @@ result: list[dict] = reg2json(
 
 ## Output Format Example
 
-Each plugin result becomes one document with `ecs.version` set to `8.17.0`.
-Standard `event`,
+Each plugin result becomes one document. Standard `event`,
 `registry`, `log.file`, `tags`, and `@timestamp` fields describe the artifact.
 Lossless plugin-specific data and the original offline-hive location are kept
 under `reg2es`.
@@ -175,7 +174,6 @@ these fields; use a new index for the updated output.
 
 ```json
 {
-  "ecs": {"version": "8.17.0"},
   "@timestamp": "2015-10-30T07:24:57.814133+00:00",
   "event": {
     "kind": "event",

reg2es-2.2.2/src/reg2es/__about__.py

@@ -0,0 +1 @@
+__version__ = "2.2.2"

{reg2es-2.2.1 → reg2es-2.2.2}/src/reg2es/models/Reg2es.py

@@ -470,9 +470,6 @@ _ECS_REGISTRY_TYPES = {
     "RegQWord": "REG_QWORD",
 }
 
-_ECS_VERSION = "8.17.0"
-
-
 def _join_registry_path(*parts: Optional[str]) -> str:
     return "\\".join(part.strip("\\") for part in parts if part)
 
@@ -572,7 +569,6 @@ def plugin_result_to_document(
     if result.value_name is not None:
         registry_path = _join_registry_path(registry_path, result.value_name)
     doc: dict = {
-        "ecs": {"version": _ECS_VERSION},
         "event": {
             "kind": "event",
             "category": ["registry"],

{reg2es-2.2.1 → reg2es-2.2.2}/tests/test_model.py

@@ -386,7 +386,6 @@ def test_plugin_result_conversion_is_ecs_shaped_and_lossless() -> None:
         "bytes": "3q0=",
     }
     assert base64.b64decode(document["registry"]["data"]["bytes"]) == b"\xde\xad"
-    assert document["ecs"]["version"] == "8.17.0"
     assert document["registry"]["path"] == "HKLM\\SYSTEM\\Control\\Test\\Payload"
     assert document["reg2es"]["value_type"] == result.value_type
     assert document["reg2es"]["value_size"] == 2

reg2es-2.2.1/src/reg2es/__about__.py

@@ -1 +0,0 @@
-__version__ = "2.2.1"