From 965e2bb91cd3f76124b8ac9c59525ddce725aa88 Mon Sep 17 00:00:00 2001 From: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com> Date: Tue, 21 Jun 2022 16:30:24 +0900 Subject: [PATCH] update changelog and readme text --- CHANGELOG-Japanese.md | 2 +- CHANGELOG.md | 4 ++-- README.md | 2 +- src/detections/configs.rs | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/CHANGELOG-Japanese.md b/CHANGELOG-Japanese.md index fb2aa949..afccf3a2 100644 --- a/CHANGELOG-Japanese.md +++ b/CHANGELOG-Japanese.md @@ -1,6 +1,6 @@ # 変更点 -## v1.4 [2022/XX/XX] +## v1.4.0 [2022/XX/XX] **新機能:** diff --git a/CHANGELOG.md b/CHANGELOG.md index 240aff28..e1544c7c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,11 +1,11 @@ # Changes -## v1.4 [2022/XX/XX] +## v1.4.0 [2022/XX/XX] **New Features:** - Added `--target-file-ext` option. You can specify additional file extensions to scan in addtition to the default `.evtx` files. For example, `--target-file-ext evtx_data` or multiple extensions with `--target-file-ext evtx1 evtx2`. (#586) (@hitenkoku) -- Added `--exclude-status` option: Exclude filter by `status` in a rule. (#596) (@hitenkoku) +- Added `--exclude-status` option: You can ignore rules based on their `status`. (#596) (@hitenkoku) **Enhancements:** diff --git a/README.md b/README.md index 8e4a785a..01dc064e 100644 --- a/README.md +++ b/README.md @@ -336,7 +336,7 @@ OPTIONS: -d, --directory Directory of multiple .evtx files -D, --enable-deprecated-rules Enable rules marked as deprecated --end-timeline End time of the event logs to load (ex: "2022-02-22 23:59:59 +09:00") - --exclude-status ... Exclude by status in rule (ex: experimental) (ex: stable test) + --exclude-status ... Ignore rules according to status (ex: experimental) (ex: stable test) -f, --filepath File path to one .evtx file -F, --full-data Print all field information -h, --help Print help information diff --git a/src/detections/configs.rs b/src/detections/configs.rs index 17731171..f6d06a61 100644 --- a/src/detections/configs.rs +++ b/src/detections/configs.rs @@ -214,7 +214,7 @@ pub struct Config { #[clap(long = "target-file-ext", multiple_values = true)] pub evtx_file_ext: Option>, - /// Exclude by status in rule (ex: experimental) (ex: stable test) + /// Ignore rules according to status (ex: experimental) (ex: stable test) #[clap(long = "exclude-status", multiple_values = true)] pub exclude_status: Option>, }