CSEC_PUBLIC/WELA
1
0
Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2025-12-08 02:02:56 +01:00
Code Issues Packages Projects Releases Wiki Activity

add rule parser actions

Browse Source
This commit is contained in:
fukusuket
2025-03-09 20:33:31 +09:00
parent 51b9816a9a
commit ceeb823e1b
1 changed files with 13 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
wela-extractor/src/main.rs
View File

@@ -1,8 +1,9 @@
use csv::ReaderBuilder; use csv::ReaderBuilder;
use serde_json::{Value, json};
use std::collections::HashSet;
use std::error::Error; use std::error::Error;
use std::{env, fs};
use std::fs::write; use std::fs::write;
use serde_json::{json, Value}; use std::{env, fs};
use walkdir::WalkDir; use walkdir::WalkDir;
use yaml_rust2::{Yaml, YamlLoader}; use yaml_rust2::{Yaml, YamlLoader};
@@ -20,7 +21,7 @@ fn list_yml_files(dir: &str) -> Vec<String> {
yml_files yml_files
} }
fn extract_event_ids(yaml: &Yaml, event_ids: &mut Vec<String>) { fn extract_event_ids(yaml: &Yaml, event_ids: &mut HashSet<String>) {
match yaml { match yaml {
Yaml::Hash(hash) => { Yaml::Hash(hash) => {
for (key, value) in hash { for (key, value) in hash {
@@ -29,17 +30,17 @@ fn extract_event_ids(yaml: &Yaml, event_ids: &mut Vec<String>) {
Yaml::Array(ids) => { Yaml::Array(ids) => {
for id in ids { for id in ids {
if let Some(id) = id.as_i64() { if let Some(id) = id.as_i64() {
event_ids.push(id.to_string()); event_ids.insert(id.to_string());
} else if let Some(id) = id.as_str() { } else if let Some(id) = id.as_str() {
event_ids.push(id.to_string()); event_ids.insert(id.to_string());
} }
} }
} }
Yaml::String(id) => { Yaml::String(id) => {
event_ids.push(id.clone()); event_ids.insert(id.clone());
} }
Yaml::Integer(id) => { Yaml::Integer(id) => {
event_ids.push(id.to_string()); event_ids.insert(id.to_string());
} }
_ => {} _ => {}
} }
@@ -65,16 +66,18 @@ fn parse_yaml(doc: Yaml, eid_subcategory_pair: &Vec<(String, String)>) -> Option
let title = doc["title"].as_str().unwrap_or(""); let title = doc["title"].as_str().unwrap_or("");
let desc = doc["description"].as_str().unwrap_or(""); let desc = doc["description"].as_str().unwrap_or("");
let level = doc["level"].as_str().unwrap_or(""); let level = doc["level"].as_str().unwrap_or("");
let mut event_ids = Vec::new(); let mut event_ids = HashSet::new();
extract_event_ids(&doc, &mut event_ids); extract_event_ids(&doc, &mut event_ids);
let mut subcategories = Vec::new(); let mut subcategories = HashSet::new();
for event_id in &event_ids { for event_id in &event_ids {
for (eid, subcategory) in eid_subcategory_pair { for (eid, subcategory) in eid_subcategory_pair {
if eid == event_id { if eid == event_id {
subcategories.push(subcategory.clone()); subcategories.insert(subcategory.clone());
} }
} }
} }
let event_ids: Vec<String> = event_ids.into_iter().collect();
let subcategories: Vec<String> = subcategories.into_iter().collect();
return Some(json!({ return Some(json!({
"id": uuid, "id": uuid,
"title": title, "title": title,