From 53a577c15b51e6735f3a659212cbc736af7f42de Mon Sep 17 00:00:00 2001 From: kchoudhury Date: Wed, 8 Nov 2023 20:17:09 +0530 Subject: [PATCH] Validate hash values --- cmd/harness/validate.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/cmd/harness/validate.go b/cmd/harness/validate.go index 52eaef7..b75cfc2 100644 --- a/cmd/harness/validate.go +++ b/cmd/harness/validate.go @@ -100,6 +100,8 @@ func CheckProcessEvent(testRun *SingleTestRun, evt *types.SimpleEvent, nativeJso isMatch = CheckMatch(evt.ProcessFields.Env, fc.Op, fc.Value) case "is_elevated": isMatch = CheckMatch(BoolAsString(evt.ProcessFields.IsElevated), fc.Op, fc.Value) + case "hashes": + isMatch = CheckMatch(evt.ProcessFields.Hashes, fc.Op, fc.Value) default: fmt.Println("ERROR: unknown FieldName", fc) }