Commit Graph

59 Commits

Author SHA1 Message Date
DastInDark 8ccaf1d21d add: #615 feature 2022-07-02 16:51:50 +09:00
DastInDark b0b1398927 add: v1.4.2 format 2022-07-02 16:49:12 +09:00
Tanaka Zakku 70c6f28556 update changelog and readme 1.4.1 2022-06-30 12:09:00 +09:00
Tanaka Zakku 220bac46e4 update changelog 2022-06-29 23:21:14 +09:00
DastInDark 70f03887e8 Merge branch 'main' into 606-print-all-field-info-when-no-details-are-defined 2022-06-29 22:31:38 +09:00
DastInDark a2d8b9bb24 updated changelog #606 2022-06-29 20:51:54 +09:00
DustInDark 37f9350082 updated changelog #608 2022-06-29 00:32:38 +09:00
Yamato Security 09f8af971e Merge branch 'main' into 603-bug-non-utf-8-byte-sequences-error-with-color-output 2022-06-26 07:08:06 +09:00
Tanaka Zakku aa69a5ac76 update changelog 2022-06-26 07:01:55 +09:00
DustInDark 53ca69b05e updated changelog and updated rules #603 2022-06-26 00:29:56 +09:00
DustInDark f4dea799bc Merge branch 'main' into 592-config-flag-seems-to-be-ignored 2022-06-25 21:57:01 +09:00
DustInDark a8925e3651 updated changelog #602 2022-06-25 00:33:16 +09:00
DustInDark 7937ea41d5 Merge branch 'main' into 596-new-feature-exclude-status 2022-06-24 23:43:44 +09:00
DustInDark 085795d924 fixed sentence in changelog 2022-06-24 22:19:39 +09:00
DustInDark beb721aeea Merge branch 'main' into 592-config-flag-seems-to-be-ignored 2022-06-23 21:22:17 +09:00
DustInDark 3a493d6beb updated changelog #592 2022-06-23 20:46:18 +09:00
DustInDark 9b131fd317 update chage log jp #595 2022-06-22 23:58:36 +09:00
Tanaka Zakku 965e2bb91c update changelog and readme text 2022-06-21 16:30:24 +09:00
DustInDark ec6e0b7c04 updated changelog #596 2022-06-21 15:11:58 +09:00
DustInDark b4ef082525 Merge pull request #594 from Yamato-Security/586-evtx-files-with-different-extension-option
evtx files with different extension option( --add-file-extentions)
2022-06-21 12:09:41 +09:00
Tanaka Zakku e37371a077 update readme and option name 2022-06-21 11:00:32 +09:00
DustInDark ab440231eb updated changelog #586 2022-06-20 20:19:58 +09:00
DustInDark 4a92ff8efc fixed changelog typo 2022-06-19 23:42:09 +09:00
DustInDark 00dce590a5 updated changelog #359 2022-06-19 23:36:01 +09:00
DustInDark 334c401cda Merge branch 'main' into clap_update_v3 2022-06-14 22:53:52 +09:00
Tanaka Zakku ce51728070 v1.3.2 2022-06-13 08:55:01 +09:00
DustInDark 28fabf6c9b updated changelog #387 #413 2022-06-13 02:18:54 +09:00
Tanaka Zakku e390940633 finalize 1.3.1 2022-06-12 14:48:07 +09:00
DustInDark d37c6b1866 Merge branch 'main' into 583-enhancement-output-processing-rules-msg-and-rule-status-metrics 2022-06-11 15:29:14 +09:00
DustInDark da5a025f93 updated changelog #583 2022-06-11 04:31:57 +09:00
DustInDark f55dd7ebf9 updated changelog #579 2022-06-10 16:59:13 +09:00
DustInDark 9abff480e9 Merge branch 'main' into 574-add-more-timestamp-format-options 2022-06-10 12:00:35 +09:00
DustInDark 513378dc76 updated changelog #577 2022-06-09 02:26:05 +09:00
DustInDark bf4f80a8b4 update changelog #487 2022-06-09 02:20:14 +09:00
DustInDark 925e386fb2 added template in v1.3.1 changeme 2022-06-09 02:14:04 +09:00
DustInDark 77b063639b updated changelog #574 2022-06-08 19:13:29 +09:00
Tanaka Zakku 865761f35d strip symbols when compiling 2022-06-07 10:51:34 +09:00
DustInDark d00737c033 add view event frequency timeline option (#567)
* added option visual-timeline option #566

* updated readme #566

* updated changelog #566

* updated rules

* cargo fmt

* change --visual-timeline to --visualize-timeline

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-06-05 17:41:08 +09:00
Yamato Security 6811acae6a changelog date update (#565)
* changelog date update

* quick-xml and static_vcruntime update
2022-06-04 15:35:43 +09:00
DustInDark 0df42b67ba output saving results message (#563)
* added Results Summary title #561

* added results message when output option is enabled. #561

* version number update

* added newline

* removed newline

* tuned output #561

* fixed bug that console output table header color is same with 1st row color #561

* cargo fmt
2022-06-03 20:49:26 +09:00
DustInDark 9e1fabb21e display computers with most alerts (#558)
* added top3 alert by level and computer #557

* cargo fmt

* updated changelog #557

* updated readme #557

* added output when one computer name in level. #557

* updated screenshot

* updated rules

* add SOF-ELK link

* readme update

* readme update

* cargo fmt

* change display num from 3 to 5 #557

* excluded count when computer name is "-" in event and fixed output #557

- removed warn output.

- changed output when count is 0.

* cargo fmt

* changed computer name summary to filter unique computer name and rule path pair #557

* cargo fmt

* readme update change order of output

* changelog update

* fixed crash bug when level is not valid #560 #557

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-06-03 12:01:14 +09:00
DustInDark af5a85fc0c separate excluded and noisy rules count (#559)
* changed ignored rules display separately  exclude rules and noisy rules.

* fixed tests #556

* cargo fmt

* updated changelog #556

* change order

* sorted output order #556

* cargo fmt

* screenshot update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-06-03 11:56:20 +09:00
DustInDark 39468d3b06 fixed bug hayabusa crashes when level is not valid (#562)
* fixed undefined level unwarp panic bug #560

* updated changelog #560
2022-06-03 11:55:22 +09:00
DustInDark 2dcf960d51 display default channel name if not defined (#555)
* displayed other channel data in Channel column #553

* updated changelog #553

* updated changelog

* readme and channel abbreviataions update

* changelog update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-06-01 13:01:14 +09:00
DustInDark 7a7afe732c most detections summary by date (#551)
* added Date with most detections by level #550

* cargo fmt

* updated changelog #550

* updated readme #550

* removed  most undefined detections date in summary #550

* cargo fmt

* add space after level tuning

* changed undefined rule detection count to no show #550

* cargo fmt

* readme update

* channel abb update

* channel abb update

* readme update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-31 22:29:51 +09:00
DustInDark 4c1aa94eba display logo in green (#552)
* added termcolor reset function #537

* added logo green output #537

* fixed test

* cargo fmt

* updated changelog #537

* fixed clippy error

* update logo screenshot

* updated rules

* changed no colored logo when --no-color option is enabled

* fixed colored reset bug when --update-rules option is enabled

* fixed color reset bug when --level-tuning option is enabled

* cargo fmt

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-31 17:06:12 +09:00
DustInDark 2653e87588 start timeline and end timeline do not work (#547)
* fixed dont work start-timeline and end-timeline #546

* fixed condition

* added changelog #546

* changelog update

* changed stop analysis when start-timeline and end-timeline happend parse error #546

* cargo fmt

* fixed alert message

* fixed lack of timestamp convert

* cargo fmt

* readme/usage update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-28 10:07:39 +09:00
DustInDark a17d0d4e37 display EventRecordID (#549)
* added -R --display-record-id #548

* fixed test data #548

* cargo fmt

* added describe of -R --display-record-id option to README #548

* updated changelog #548

* readme update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-27 22:19:40 +09:00
DustInDark 69c41c4859 540 enhancement print total evtx file size (#545)
* added ByteSize crate  #540

* displayed total evtx file size #540

* updated CHANGELOG #540

* cargo fmt

* added blank like, updated cargo

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-27 11:11:44 +09:00
DustInDark 7be79efc21 fixed event timeline frequency font color changed when use f option #542 (#544)
* fixed event timeline frequency font color changed when use f option #542

* fixed duplicate count detection to same record in data reduction #543

* fixed error #542

* fixed fmt

* fixed error

* changed no frequency timeline output when events is less than 5 record.

* Error message update

* added newline after progress bar

* fixed  frequency timeline logic to pass test

* cargo fmt

* Added CHANGELOG #533 #538 #525

* changelog update

* updated readme #533 #538

* readme update

* startup logo update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-27 10:13:40 +09:00