Adding TRR for SAM Dumping (T1003.002) (#22)

* Adding TRR for SAM Dumping (T1003.002)

* fixing file structure

* Fixing linter errors

* Addressing reviewer comments

* Apply suggestion from @sludgework

Co-authored-by: Adam Przybyszewski <80924384+sludgework@users.noreply.github.com>

* Fixing linter error

* Apply suggestion from @vanvleeta

* Apply suggestion from @vanvleeta

* Apply suggestion from @vanvleeta

---------

Co-authored-by: Adam Przybyszewski <80924384+sludgework@users.noreply.github.com>

Author: vanvleeta

reports/trr0000/win/README.md

@@ -0,0 +1,229 @@
+{
+  "style": {
+    "font-family": "sans-serif",
+    "background-color": "#ffffff",
+    "background-image": "",
+    "background-size": "100%",
+    "node-color": "#ffffff",
+    "border-width": 4,
+    "border-color": "#000000",
+    "radius": 50,
+    "node-padding": 5,
+    "node-margin": 2,
+    "outside-position": "auto",
+    "node-icon-image": "",
+    "node-background-image": "",
+    "icon-position": "inside",
+    "icon-size": 64,
+    "caption-position": "inside",
+    "caption-max-width": 200,
+    "caption-color": "#000000",
+    "caption-font-size": 16,
+    "caption-font-weight": "normal",
+    "label-position": "outside",
+    "label-display": "pill",
+    "label-color": "#000000",
+    "label-background-color": "#ffffff",
+    "label-border-color": "#000000",
+    "label-border-width": 2,
+    "label-font-size": 14,
+    "label-padding": 5,
+    "label-margin": 4,
+    "directionality": "directed",
+    "detail-position": "inline",
+    "detail-orientation": "parallel",
+    "arrow-width": 5,
+    "arrow-color": "#000000",
+    "margin-start": 5,
+    "margin-end": 5,
+    "margin-peer": 20,
+    "attachment-start": "normal",
+    "attachment-end": "normal",
+    "relationship-icon-image": "",
+    "type-color": "#000000",
+    "type-background-color": "#ffffff",
+    "type-border-color": "#000000",
+    "type-border-width": 0,
+    "type-font-size": 16,
+    "type-padding": 5,
+    "property-position": "outside",
+    "property-alignment": "colon",
+    "property-color": "#000000",
+    "property-font-size": 16,
+    "property-font-weight": "normal"
+  },
+  "nodes": [
+    {
+      "id": "n0",
+      "position": {
+        "x": 75,
+        "y": 50
+      },
+      "caption": "Call API",
+      "labels": [],
+      "properties": {
+        "API": "CreateFile",
+        "Prefix": "\"\\\\.\\\" or \"\\\\?\\\""
+      },
+      "style": {}
+    },
+    {
+      "id": "n1",
+      "position": {
+        "x": 75,
+        "y": 326.7497119080524
+      },
+      "caption": "Call API",
+      "labels": [],
+      "properties": {
+        "API": "NtCreateFile",
+        "Prefix": "\"\\\\.\\\" or \"\\\\?\\\""
+      },
+      "style": {}
+    },
+    {
+      "id": "n2",
+      "position": {
+        "x": 320,
+        "y": 50
+      },
+      "caption": "Call API",
+      "labels": [],
+      "properties": {
+        "API": "ReadFile"
+      },
+      "style": {}
+    },
+    {
+      "id": "n3",
+      "position": {
+        "x": 320,
+        "y": 320.2
+      },
+      "caption": "Call API",
+      "labels": [],
+      "properties": {
+        "API": "NtReadFile"
+      },
+      "style": {}
+    },
+    {
+      "id": "n4",
+      "position": {
+        "x": 572.2050020146113,
+        "y": 50
+      },
+      "caption": "Call API",
+      "labels": [],
+      "properties": {
+        "API": "SetFilePointer"
+      },
+      "style": {}
+    },
+    {
+      "id": "n5",
+      "position": {
+        "x": 824.4100040292226,
+        "y": 50
+      },
+      "caption": "Call API",
+      "labels": [],
+      "properties": {
+        "API": "WriteFile"
+      },
+      "style": {}
+    },
+    {
+      "id": "n6",
+      "position": {
+        "x": 824.4100040292226,
+        "y": 320.2
+      },
+      "caption": "Call API",
+      "labels": [],
+      "properties": {
+        "API": "NtWriteFile"
+      },
+      "style": {}
+    },
+    {
+      "id": "n7",
+      "position": {
+        "x": 572.2050020146113,
+        "y": 320.2
+      },
+      "caption": "Call API",
+      "labels": [],
+      "properties": {
+        "API": "NtSetInformationFile"
+      },
+      "style": {}
+    }
+  ],
+  "relationships": [
+    {
+      "id": "n0",
+      "fromId": "n0",
+      "toId": "n1",
+      "type": "",
+      "properties": {},
+      "style": {}
+    },
+    {
+      "id": "n1",
+      "fromId": "n1",
+      "toId": "n2",
+      "type": "",
+      "properties": {},
+      "style": {}
+    },
+    {
+      "id": "n2",
+      "fromId": "n2",
+      "toId": "n3",
+      "type": "",
+      "properties": {},
+      "style": {}
+    },
+    {
+      "id": "n3",
+      "fromId": "n5",
+      "toId": "n6",
+      "type": "",
+      "properties": {},
+      "style": {}
+    },
+    {
+      "id": "n4",
+      "fromId": "n4",
+      "toId": "n7",
+      "type": "",
+      "properties": {},
+      "style": {}
+    },
+    {
+      "id": "n5",
+      "fromId": "n7",
+      "toId": "n5",
+      "type": "",
+      "properties": {},
+      "style": {}
+    },
+    {
+      "id": "n6",
+      "fromId": "n3",
+      "toId": "n4",
+      "type": "",
+      "properties": {},
+      "style": {}
+    },
+    {
+      "id": "n7",
+      "fromId": "n7",
+      "toId": "n2",
+      "type": "",
+      "properties": {},
+      "style": {}
+    }
+  ]
+}