* added termcolor reset function #537
* added logo green output #537
* fixed test
* cargo fmt
* updated changelog #537
* fixed clippy error
* update logo screenshot
* updated rules
* changed no colored logo when --no-color option is enabled
* fixed colored reset bug when --update-rules option is enabled
* fixed color reset bug when --level-tuning option is enabled
* cargo fmt
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
* added reduction percent and all records cnt #538
* version updated v1.3.0-dev
* added events word
* added side margin to sparkline #533
* fixed centering
* change margin from 5 to 3
* readme warning typo fix
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
* changed no found placeholder output to n/a #528
* added n/a output to details when not found placeholder
* added v1.3.0 changelog describe and #528 enhance
* fixed typo and fixed markdown format
* fixed test
* readme, changelog, version update
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
* removed used crate in color option and add term color #481
* removed level_color.txt due to fix output color #481
* removed color definition by file
* update cargo
* removed color definiton by true type vec
* added hex crate
* added level_color.txt and color output to command prompt and powershell #481
* adjust termcolor crate
* restored level_color.txt
* remove c option #481
* fixed document #481
* fixed stdoutput test
* add no-color option #481
- disable color output when no-color option set
* added no-color option document
* Fixed clipy err
* doc, changelog, cargo pkg update
* changelog and rules update
* version up to 1.2.2
* readme and changelog update
* reformat to markdown lint
* adjusted logon summary generator section in japanese readme to english
readme
* fixed typo in readme
Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
* reduced mitre attck tag output by config file #477
* prepared 1.2.0 version toml
* added test files and mitre attck strategy tag file #477
* fixed cargo.toml version
* updated cargo.lock
* output tag english update
* cargo fmt
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
* add get_pivot_keyword() func
* change function name and call it's function
* [WIP] support config file
* compilete output
* cargo fmt
* [WIP] add test
* add test
* support -o option in pivot
* add pivot mod
* fix miss
* pass test in pivot.rs
* add comment
* pass all test
* add fast return
* fix output
* add test config file
* review
* rebase
* cargo fmt
* test pass
* fix clippy in my commit
* cargo fmt
* little refactor
* change file input logic and config format
* [WIP] change output
* [wip] change deta structure
* change output & change data structure
* pass test
* add config
* cargo fmt & clippy & rebase
* fix cllipy
* delete /rules/ in .gitignore
* clean comment
* clean
* clean
* fix rebase miss
* fix rebase miss
* fix clippy
* file name output on -o to stdout
* add pivot_keywords.txt to ./config
* updated english
* Documentation update
* cargo fmt and clean
* updated translate japanese
* readme update
* readme update
Co-authored-by: DustInDark <nextsasasa@gmail.com>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
* add no event key
* support not-register-alias search
* added checking EventData when key do not match in alias #290
- added checking key in Event.EventData, if key is not exist in eventkey_alias.txt.
* cargo fmt
* fixed panic when filter files does not exists
* fixed errorlog format when filter config files does not exist
Co-authored-by: DustInDark <nextsasasa@gmail.com>
* fixed no detected bug when enter and tab control character in record data #395
* added remove \r \n \t character in utils.rs
* added call of utils.rs function in selectionnodes.rs
* added tests #395
* changed space control character function args #395
* fixed test due to function args changes #395
* changed replace method using regex #395
* changed regex by record_data_filter.txt #395
* added record_data_filter.txt #395
* fixed test #395
* added record_data_filter
- add Properties regex
- add ScriptBlockText regex
- add Payload regex
* added tags information in csv output #234
* fixed test due to change csvformat struct #234
* changed tag info separator #234
* changed separator #234
* changed tag info separator #234
* added color code emit_csv test
* replaced HashMap and HashSet to hashbrown #368
* removed debug output in test #368
* added color option #376
* fixed process of output check #376
* removed color output check from test #376
* english updates
* colored detections and rules count output by level #384
* refactoring in colored output process #384
* update usage #364#376
* fixed markdown lint
* added windows terminal bug evasion way #382
* update readme
* fixed colored output test
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>