When details is not set, results are outputted twice

[YamatoSecurity]

When details is not set, results are outputted twice in Details and ExtraFieldInfo. We should just output once in the Details column. I am not sure if this happens in JSON output as well.

@fukusuket Sorry for another bug fix, could you look at this when you have time?

[fukusuket]

Yes, I will look into it!💪

[fukusuket]

This issue did not occur with json-timeline. Therefore, it is a csv-timeline only issue.

% ./hayabusa json-timeline -d ../hayabusa-sample-evtx -r Sec_4741_Info_CmpAcctCreated.yml -w  -q
...
{
    "Timestamp": "2021-12-14 23:42:48.817 +09:00",
    "RuleTitle": "Computer Account Created",
    "Level": "info",
    "Computer": "rootdc1.offsec.lan",
    "Channel": "Sec",
    "EventID": 4741,
    "RecordID": 237294524,
    "Details": {},
    "ExtraFieldInfo": {
        "AccountExpires": "<never>",
        "AllowedToDelegateTo": "-",
        "DisplayName": "<value not set>",
        "DnsHostName": "-",
        "HomeDirectory": "<value not set>",
        "HomePath": "<value not set>",
        "LogonHours": "<value not set>",
        "NewUacValue": "0x84",
        "OldUacValue": "0x0",
        "PasswordLastSet": "<never>",
        "PrimaryGroupId": 515,
        "PrivilegeList": "SeMachineAccountPrivilege",
        "ProfilePath": "<value not set>",
        "SamAccountName": "compnay-88$",
        "ScriptPath": "<value not set>",
        "ServicePrincipalNames": "-",
        "SidHistory": "-",
        "SubjectDomainName": "OFFSEC",
        "SubjectLogonId": "0x308fb82ad",
        "SubjectUserName": "hack1",
        "SubjectUserSid": "S-1-5-21-4230534742-2542757381-3142984815-1234",
        "TargetDomainName": "OFFSEC",
        "TargetSid": "S-1-5-21-4230534742-2542757381-3142984815-1296",
        "TargetUserName": "compnay-88$",
        "UserAccountControl": "PasswordNotRequired-Enabled\\r\\n\\t\\tWorkstationTrustAccount-Enabled",
        "UserParameters": "<value changed, but not displayed>",
        "UserPrincipalName": "-",
        "UserWorkstations": "<value not set>"
    },
    "RuleID": "42a0a842-2b82-4b2d-8e44-5580fb6c38db"
}

[fukusuket]

@YamatoSecurity
I have one question!
what is the expected output as a csv-timeline when Details is undefined? As with json-timeline, is the expectation that the Details column will be empty?