Skip to content

Instantly share code, notes, and snippets.

View nobitis's full-sized avatar
🏠
Working from home

Phuong VD nobitis

🏠
Working from home
View GitHub Profile

Introduction

  • C-a == Ctrl-a
  • M-a == Alt-a

General

:q        close
:w        write/saves
:wa[!]    write/save all windows [force]
:wq       write/save and close
@nobitis
nobitis / sample_code.py
Last active August 29, 2017 07:05
test
@rule('production_sudo',
logs=['osquery'],
matchers=['pci'],
outputs=['s3', 'pagerduty', 'slack'])
def production_sudo(record):
table_name = record['name']
tag = record['columns']['tag']
return (
table_name == 'linux_syslog_auth' and
fnmatch(tag, 'sudo*')