Support for Covenant C2 framework about redelk HOT 4 OPEN

Would have my preference to - just as with other C2s that RedELK supports - keep the way of logging part of the codebase of the actual C2 itself and not part of RedELK. That would mean your option 1. All the other steps form my initial post is then still left on the RedELK side.

It would make sense to make an issue at the Covenant side, so I did: cobbr/Covenant#221

from redelk.

I did some checks and it looks like Covenant doesn't have text log files, everything is stored in a sqlite file. I have also 0 experience with Covenant except the new install I just performed.

We could have 2 options there:

1. Add support for text logs to Covenant
2. Make a script that will periodically query the sqlite database and append the changes in a structured manner to a text log file

from redelk.

Update: the roadmap for the 0.7 release of Covenant now includes extra logging. When that is out, we can start working on the RedELK side.

from redelk.

Awesome, that'd be great to have it in, I'll work on it when it's released

from redelk.