CSEC_PUBLIC/hayabusa
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge branch 'main' of https://github.com/Yamato-Security/hayabusa into main

Browse Source
This commit is contained in:
Tanaka Zakku
2021-11-06 08:14:39 +09:00
parent 9273861d55 dcf015970c
commit 77a5025322
1 changed files with 12 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
src/detections/rule/count.rs
View File

@@ -74,7 +74,8 @@ pub fn create_count_key(rule: &RuleNode, record: &Value) -> String {
AlertMessage::alert( AlertMessage::alert(
&mut stdout, &mut stdout,
format!("field_value alias not found.value:{}", field_value), format!("field_value alias not found.value:{}", field_value),
); )
.ok();
} }
}; };
} }
@@ -91,7 +92,8 @@ pub fn create_count_key(rule: &RuleNode, record: &Value) -> String {
AlertMessage::alert( AlertMessage::alert(
&mut stdout, &mut stdout,
format!("by_field_value alias not found.value:{}", by_field_value), format!("by_field_value alias not found.value:{}", by_field_value),
); )
.ok();
} }
} }
} }
@@ -180,7 +182,8 @@ impl TimeFrameInfo {
AlertMessage::alert( AlertMessage::alert(
&mut stdout, &mut stdout,
format!("timeframe is invalid.input value:{}", value), format!("timeframe is invalid.input value:{}", value),
); )
.ok();
} }
return TimeFrameInfo { return TimeFrameInfo {
timetype: ttype, timetype: ttype,
@@ -213,7 +216,8 @@ pub fn get_sec_timeframe(timeframe: &Option<TimeFrameInfo>) -> Option<i64> {
AlertMessage::alert( AlertMessage::alert(
&mut stdout, &mut stdout,
format!("timeframe num is invalid. timeframe.{}", err), format!("timeframe num is invalid. timeframe.{}", err),
); )
.ok();
return Option::None; return Option::None;
} }
} }
@@ -751,7 +755,10 @@ mod tests {
let mut rule_yaml = YamlLoader::load_from_str(rule_str).unwrap().into_iter(); let mut rule_yaml = YamlLoader::load_from_str(rule_str).unwrap().into_iter();
let test = rule_yaml.next().unwrap(); let test = rule_yaml.next().unwrap();
let mut rule_node = create_rule(test); let mut rule_node = create_rule(test);
rule_node.init(); let error_checker = rule_node.init();
if error_checker.is_err() {
assert!(false, "failed to init rulenode");
}
for record_str in records_str { for record_str in records_str {
match serde_json::from_str(record_str) { match serde_json::from_str(record_str) {
Ok(record) => { Ok(record) => {