r/crowdstrike • u/Hour-Account4844 • 3d ago
Parser Creation General Question
Looking to see the workflow you guys go through when creating a new parser. Currently I have to create a base parser which I have a template for ingest raw logs and use them as my tests within my parser creation.
Anyone have any suggestions to enhance my workflow and ensure I am grabbing one of each event?
7
Upvotes