change from lagotto to hayabusa. (#170)
This commit is contained in:
50
Cargo.lock
generated
50
Cargo.lock
generated
@@ -690,6 +690,31 @@ version = "0.11.2"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "ab5ef0d4909ef3724cc8cce6ccc8572c5c817592e9285f5464f8e86f8bd3726e"
|
||||
|
||||
[[package]]
|
||||
name = "hayabusa"
|
||||
version = "1.0.0"
|
||||
dependencies = [
|
||||
"base64",
|
||||
"chrono",
|
||||
"clap",
|
||||
"csv",
|
||||
"dotenv",
|
||||
"evtx",
|
||||
"flate2",
|
||||
"lazy_static",
|
||||
"linked-hash-map",
|
||||
"mopa",
|
||||
"num_cpus",
|
||||
"quick-xml 0.17.2",
|
||||
"regex",
|
||||
"serde",
|
||||
"serde_derive",
|
||||
"serde_json",
|
||||
"slack-hook",
|
||||
"tokio 1.3.0",
|
||||
"yaml-rust",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "hermit-abi"
|
||||
version = "0.1.15"
|
||||
@@ -896,31 +921,6 @@ dependencies = [
|
||||
"winapi-build",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "lagotto"
|
||||
version = "1.0.0"
|
||||
dependencies = [
|
||||
"base64",
|
||||
"chrono",
|
||||
"clap",
|
||||
"csv",
|
||||
"dotenv",
|
||||
"evtx",
|
||||
"flate2",
|
||||
"lazy_static",
|
||||
"linked-hash-map",
|
||||
"mopa",
|
||||
"num_cpus",
|
||||
"quick-xml 0.17.2",
|
||||
"regex",
|
||||
"serde",
|
||||
"serde_derive",
|
||||
"serde_json",
|
||||
"slack-hook",
|
||||
"tokio 1.3.0",
|
||||
"yaml-rust",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "lazy_static"
|
||||
version = "1.4.0"
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
[package]
|
||||
name = "lagotto"
|
||||
name = "hayabusa"
|
||||
version = "1.0.0"
|
||||
authors = ["akiranishikawa <nishikawa@kagosec.net>"]
|
||||
edition = "2018"
|
||||
|
||||
@@ -1 +1 @@
|
||||
Zach Mathis (田中ザック)Yamato Security Yea! Project Leader
|
||||
Zach Mathis (田中ザック)Yamato Security hayabusa! Project Leader
|
||||
@@ -39,9 +39,9 @@ fn build_app<'a>() -> ArgMatches<'a> {
|
||||
}
|
||||
|
||||
App::new(&program)
|
||||
.about("Lagotto. Aiming to be the world's greatest Windows event log analysis tool!")
|
||||
.about("hayabusa. Aiming to be the world's greatest Windows event log analysis tool!")
|
||||
.version("1.0.0")
|
||||
.author("Author name Yamato-Security(https://github.com/Yamato-Security/YamatoEventAnalyzer)")
|
||||
.author("Author name Yamato-Security(https://github.com/Yamato-Security/hayabusa)")
|
||||
.setting(AppSettings::VersionlessSubcommands)
|
||||
.arg(Arg::from_usage("-f --filepath=[FILEPATH] 'Event file path'"))
|
||||
.arg(Arg::from_usage("--csv-timeline=[CSV_TIMELINE] 'Csv output timeline'"))
|
||||
|
||||
12
src/main.rs
12
src/main.rs
@@ -2,12 +2,12 @@ extern crate serde;
|
||||
extern crate serde_derive;
|
||||
|
||||
use evtx::{EvtxParser, ParserSettings};
|
||||
use lagotto::detections::detection;
|
||||
use lagotto::detections::detection::EvtxRecordInfo;
|
||||
use lagotto::detections::print::AlertMessage;
|
||||
use lagotto::omikuji::Omikuji;
|
||||
use lagotto::{afterfact::after_fact, detections::utils};
|
||||
use lagotto::{detections::configs, timeline::timeline::Timeline};
|
||||
use hayabusa::detections::detection;
|
||||
use hayabusa::detections::detection::EvtxRecordInfo;
|
||||
use hayabusa::detections::print::AlertMessage;
|
||||
use hayabusa::omikuji::Omikuji;
|
||||
use hayabusa::{afterfact::after_fact, detections::utils};
|
||||
use hayabusa::{detections::configs, timeline::timeline::Timeline};
|
||||
use std::{
|
||||
fs::{self, File},
|
||||
path::PathBuf,
|
||||
|
||||
@@ -47,7 +47,7 @@ impl SlackNotify {
|
||||
let p = PayloadBuilder::new()
|
||||
.text(msg)
|
||||
.channel(channel)
|
||||
.username("Lagotto Notify Bot")
|
||||
.username("hayabusa Notify Bot")
|
||||
.icon_emoji(":scream:")
|
||||
.build()
|
||||
.unwrap();
|
||||
|
||||
Reference in New Issue
Block a user