I keep breaking sysmon with silly typos because I punted writing good unittests due to the difficulty in mocking out ts_mon, and since sysmon is hard to test manually and manual tests suck
Pretty much every change I've made has had a silly typo. This is exacerbated by the copy-paste nature of sysmon code.
Add proper unittests for sysmon.
Comment 1 by bugdroid1@chromium.org
, Jun 27 2017