Commit Graph

166 Commits

Author SHA1 Message Date
DustInDark
05abac030f fixed condition #586 2022-06-21 09:47:44 +09:00
DustInDark
21dbe2c97a added add-file-extensions option #586 2022-06-20 19:53:44 +09:00
DustInDark
2a5d24a753 fixed filepath option dont work bug due to clap version up 2022-06-19 11:29:18 +09:00
DustInDark
91a781ffa2 changed way of getting arg due to clap derive 2022-06-16 17:40:58 +09:00
DustInDark
338e1fdb17 fixed comment 2022-06-15 03:26:49 +09:00
DustInDark
0ad0a76670 fixed no output when q opion only 2022-06-15 03:26:04 +09:00
DustInDark
c2db1e1b49 changed help output #387 2022-06-14 22:49:54 +09:00
DustInDark
b49e274551 removed unnecessary default data. due to clap derive default value #413 2022-06-13 02:58:06 +09:00
DustInDark
f28ba4ae0c print help option output when args length is hayabusa.exe only #387 2022-06-13 02:01:15 +09:00
DustInDark
f3e537b909 Merge branch 'main' into clap_update_v3 2022-06-12 23:45:10 +09:00
DustInDark
7af4781134 fixed colored contributors option bug 2022-06-12 22:50:59 +09:00
DustInDark
4a2184b71e added loading detections rules output #583 2022-06-11 00:32:28 +09:00
DustInDark
50855fba15 refactor and fixed clippy:format_push_string 2022-06-07 22:21:59 +09:00
DustInDark
0bbad7de6c fixed clippy::format_push_string error 2022-06-07 21:32:50 +09:00
DustInDark
d072b9d3cd cargo fmt 2022-06-07 21:17:51 +09:00
DustInDark
d480ebef0f fixed cargo error 2022-06-07 21:15:41 +09:00
DustInDark
4220a9b5e2 replaced unnecessary clone use 2022-06-07 20:55:01 +09:00
DustInDark
9362e81f53 fixed cargo clippy error 2022-06-07 20:39:08 +09:00
DustInDark
c8d2ab1d4c fixed cargo clippy error 2022-06-07 20:16:28 +09:00
DustInDark
0df42b67ba output saving results message (#563)
* added Results Summary title #561

* added results message when output option is enabled. #561

* version number update

* added newline

* removed newline

* tuned output #561

* fixed bug that console output table header color is same with 1st row color #561

* cargo fmt
2022-06-03 20:49:26 +09:00
DustInDark
4c1aa94eba display logo in green (#552)
* added termcolor reset function #537

* added logo green output #537

* fixed test

* cargo fmt

* updated changelog #537

* fixed clippy error

* update logo screenshot

* updated rules

* changed no colored logo when --no-color option is enabled

* fixed colored reset bug when --update-rules option is enabled

* fixed color reset bug when --level-tuning option is enabled

* cargo fmt

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-31 17:06:12 +09:00
DustInDark
2653e87588 start timeline and end timeline do not work (#547)
* fixed dont work start-timeline and end-timeline #546

* fixed condition

* added changelog #546

* changelog update

* changed stop analysis when start-timeline and end-timeline happend parse error #546

* cargo fmt

* fixed alert message

* fixed lack of timestamp convert

* cargo fmt

* readme/usage update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-28 10:07:39 +09:00
DustInDark
69c41c4859 540 enhancement print total evtx file size (#545)
* added ByteSize crate  #540

* displayed total evtx file size #540

* updated CHANGELOG #540

* cargo fmt

* added blank like, updated cargo

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-27 11:11:44 +09:00
DustInDark
7be79efc21 fixed event timeline frequency font color changed when use f option #542 (#544)
* fixed event timeline frequency font color changed when use f option #542

* fixed duplicate count detection to same record in data reduction #543

* fixed error #542

* fixed fmt

* fixed error

* changed no frequency timeline output when events is less than 5 record.

* Error message update

* added newline after progress bar

* fixed  frequency timeline logic to pass test

* cargo fmt

* Added CHANGELOG #533 #538 #525

* changelog update

* updated readme #533 #538

* readme update

* startup logo update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-27 10:13:40 +09:00
DustInDark
dac2a80726 Display total event count and data reduction (#539)
* added reduction percent and all records cnt #538

* version updated v1.3.0-dev

* added events word

* added side margin to sparkline #533

* fixed centering

* change margin from 5 to 3

* readme warning typo fix

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-24 11:13:43 +09:00
DustInDark
d654c2cb6b logon summary (#523)
* logon summary #110

* logon summary #110

* english update

* add sort #110

* add sort #110

* Formatting the output string

* Fixed the check process.

* added document #110

* Fixed login failure eventID.

* Fixed clipy err

* prevent rule load output with logon-summary option #110

* fixed bug of  level-tuning execute when option is -s or -L only #110

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-17 09:36:45 +09:00
DustInDark
274123256a remove unnecessary hard reset 2022-04-22 15:31:36 +09:00
DustInDark
0414b5af78 changed force update to hayabusa-rules #490 (#509)
* changed force update to hayabusa-rules #490

* added note when update option is used

* readme update

* cargo and changelog updates

* changed jp translation

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-04-21 21:20:31 +09:00
DustInDark
06ccf8382b fixed to include noisy and exclude rules when level tuning #511 2022-04-20 18:30:05 +09:00
Tanaka Zakku
c6b2879eb5 change path 2022-04-20 10:16:25 +09:00
Tanaka Zakku
c09f9d4f5f small english fix 2022-04-12 08:38:57 +09:00
itiB
9fa60dd26d Add: show logo, and some infos 2022-04-12 00:27:02 +09:00
Yamato Security
861e1c5c4e Merge branch 'develop' into feature/level-tuning#390 2022-04-11 17:24:28 +09:00
DustInDark
620b6f375d Enhance/warning architecture#478 (#482)
* added  enhance of architecture check #478

* changed check architecture process after output logo #478

* English msg update

* fixed detect method of os-bit to windows and linux

* removed mac and unix architecture and binary and updated its process of windows

* fix clippy

* added check on Wow64 env #478

* Update contributors.txt

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-04-10 02:21:24 +09:00
itiB
bb834618d6 rm: debug line 2022-04-10 00:52:06 +09:00
itiB
8061733fd9 Fix: show usage when hayabusa has no args 2022-04-10 00:50:40 +09:00
DustInDark
a35e8ad5cb fixed config to show level-tuning option 2022-04-07 00:08:32 +09:00
DustInDark
0c27b13c85 added run args rules path to check test easy #390 2022-04-06 23:28:55 +09:00
kazuminn
c8efa95447 Pivot Keyword List機能の追加 (#412)
* add get_pivot_keyword() func

* change function name and call it's function

* [WIP] support config file

* compilete output

* cargo fmt

* [WIP] add test

* add test

* support -o option in pivot

* add pivot mod

* fix miss

* pass test in pivot.rs

* add comment

* pass all test

* add fast return

* fix output

* add test config file

* review

* rebase

* cargo fmt

* test pass

* fix clippy in my commit

* cargo fmt

* little refactor

* change file input logic and config format

* [WIP] change output

* [wip] change deta structure

* change output & change data structure

* pass test

* add config

* cargo fmt & clippy & rebase

* fix cllipy

* delete /rules/ in .gitignore

* clean comment

* clean

* clean

* fix rebase miss

* fix rebase miss

* fix clippy

* file name output on -o to stdout

* add pivot_keywords.txt to ./config

* updated english

* Documentation update

* cargo fmt and clean

* updated translate japanese

* readme update

* readme update

Co-authored-by: DustInDark <nextsasasa@gmail.com>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-04-05 21:17:23 +09:00
itiB
373dd0f8c7 Add: id, level validation 2022-04-05 01:53:24 +09:00
itiB
026d18a605 Add: Error handlings 2022-04-05 01:30:11 +09:00
itiB
6805bd6a0a Reface: split to options file 2022-04-04 00:31:21 +09:00
itiB
9149500b40 Add: level-tuning function 2022-04-03 23:41:32 +09:00
itiB
814f5a61cb cargo fmt 2022-04-03 22:01:40 +09:00
itiB
d38834e20e Add: input rule_level.txt files & read rules 2022-04-03 21:58:33 +09:00
itiB
a15bef4b30 Add: read Rule files 2022-04-03 21:58:33 +09:00
itiB
276889338d Add: --level-tuning option's outline 2022-04-03 21:57:50 +09:00
DustInDark
fa86a9a027 Fearture/ added output update result#410 (#452)
* add git2 crate #391

* added Update option #391

* updated readme #391

* fixed cargo.lock

* fixed option if-statement #391

* changed utc short option and rule-update short option #391

* updated readme

* updated readme

* fixed -u long option & version number update #391

* added fast-forwarding rules repository #391

* updated command line option #391

* moved output logo prev update rule

* fixed readme #391

* removed recursive option in readme

* changed rules update from clone and pull to submodule update #391

* fixed document

* changed unnecessary clone recursively to clone only

* English message update.

* cargo fmt

* English message update. ( 4657c35e5c cherry-pick)

* added create rules folder when rules folder is not exist

* fixed gitmodules github-rules url from ssh to https

* added output of updated file #420

* fixed error #410

* changed update rule list seq

* added test

* fixed output #410

* fixed output and fixed output date field  when  modified field is lacked #410

* fixed compile error

* fixed output

- added enter after Latest rule update output
- added output when no exist new rule
- fixed Latest rule update date format
- changed output from 'Latest rule update' to 'Latest rules update'

* fixed compile error

* changed modified date source from rules folder to each yml rule file

* formatting use chrono in main.rs

* merge develop clippy ci

* fixed output when no update rule #410

- removed Latest rule update

- no output "Rules update successfully" when No rule changed

* Change English

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-03-29 13:09:54 +09:00
DustInDark
7c7a86f7c9 Fixed Clippy Warnings (#451)
* fixed clippy warn

* fixed cargo clippy warnging

* fixed clippy warngings in clippy ver 0.1.59

* fixed clippy warnings clippy::unnecessary_to_owned
2022-03-17 08:43:48 +09:00
DustInDark
04b881cb66 changed downcast library from mopa to downcast_rs #447 (#450) 2022-03-11 14:49:47 +09:00