Alan Smithee
0fdabf0d70
added process of remove submodule cache #432
2022-03-01 03:17:55 +09:00
Alan Smithee
6e5b24282f
cargo fmt
2022-02-28 18:27:06 +09:00
Alan Smithee
c3c9423b74
fixed clippy warn
2022-02-28 18:25:54 +09:00
Alan Smithee
28ded269de
fixed process case of not exist hayabusa .git folder #432
2022-02-28 18:24:49 +09:00
Yamato Security
65eb818f9b
unique rules to detections ( #426 )
2022-02-28 10:16:39 +09:00
Alan Smithee
b22798fddd
added merge process when submodule update option #422
2022-02-27 21:04:33 +09:00
Alan Smithee
d1553e3ab1
changed crate load together
2022-02-27 21:02:43 +09:00
Yamato Security
fb007ee3a6
Small edits on help screen. ( #417 )
2022-02-27 09:04:30 +09:00
DustInDark
92c472d451
Hotfix/moved rule configs to hayabusa rules repo#409 ( #414 )
...
* fixed target config path #409
* fixed target config file path in test #409
* fixed rules target #409
* Documentation fix, deleted unneeded config files
* added workflow
* changed submodule option
* fixed worksflow to ref submodule
* fixed gitmodules
* fixed workflow
* check code insert
* added update submodules command
* test rules update
* removed test runs
* fixed error
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com >
2022-02-26 18:19:19 +09:00
DustInDark
02b1d7f07c
added update command #391 ( #392 )
...
* add git2 crate #391
* added Update option #391
* updated readme #391
* fixed cargo.lock
* fixed option if-statement #391
* changed utc short option and rule-update short option #391
* updated readme
* updated readme
* fixed -u long option & version number update #391
* added fast-forwarding rules repository #391
* updated command line option #391
* moved output logo prev update rule
* fixed readme #391
* removed recursive option in readme
* English message update.
* cargo fmt
* Added update command#391 submodule ver (#401 )
* changed rules update from clone and pull to submodule update #391
* fixed document
* changed unnecessary clone recursively to clone only
* English message update. ( 4657c35e5c71482215+YamatoSecurity@users.noreply.github.com >
* added caution case of update failed in readme #391
* fixed document
* added output error in case of loaded rule count is 0 #391 #392
https://github.com/Yamato-Security/hayabusa/pull/392#issuecomment-1050276570
* --update-rules typo
* removed unused library call
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com >
2022-02-26 18:18:03 +09:00
DustInDark
0dc5de4b73
Bug/ Fixed error when target environment is not installed vcc redistribute package ( #408 )
...
* fixed error when target environment has not installed vcc redistribute package
* added cfg to static_vcruntime when target os is windows.
2022-02-25 10:07:12 +09:00
Alan Smithee
f9b02a65b6
fixed test to change regex detectlist_suspicous_services.txt
2022-02-22 08:42:23 +09:00
DustInDark
58017e971f
fixed detection lack when tab and enter control character in event record#395 ( #396 )
...
* fixed no detected bug when enter and tab control character in record data #395
* added remove \r \n \t character in utils.rs
* added call of utils.rs function in selectionnodes.rs
* added tests #395
* changed space control character function args #395
* fixed test due to function args changes #395
* changed replace method using regex #395
* changed regex by record_data_filter.txt #395
* added record_data_filter.txt #395
* fixed test #395
* added record_data_filter
- add Properties regex
- add ScriptBlockText regex
- add Payload regex
2022-02-17 05:07:15 +09:00
DustInDark
19c44b4f66
added mitre attack data output in csv output ( #397 )
...
* added tags information in csv output #234
* fixed test due to change csvformat struct #234
* changed tag info separator #234
* changed separator #234
* changed tag info separator #234
2022-02-15 02:13:37 +09:00
DustInDark
df86958850
added live analysys feature ( #398 )
...
* added windows live analysis option #125
* added live analysis option #125
* fixed live analysys condition #125
* changed live analysis option #125
* added live-analysis option in readme #125
* fixed live-analysis check condition #125
* is_elevated crate is only windows #125
* fixed is_elevated build error #125
* fixed is_elevated library crate load
* fixed call way os dependencies crate #125
* fix build error on linux and removed unnecessary create #125
* fixed lack of load crate when build at windows #125
* Update error message
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com >
2022-02-15 02:12:45 +09:00
DustInDark
9cb54a9192
Hotfix/no output colorcode in no true color#376 ( #378 )
...
* added color code emit_csv test
* replaced HashMap and HashSet to hashbrown #368
* removed debug output in test #368
* added color option #376
* fixed process of output check #376
* removed color output check from test #376
* english updates
* colored detections and rules count output by level #384
* refactoring in colored output process #384
* update usage #364 #376
* fixed markdown lint
* added windows terminal bug evasion way #382
* update readme
* fixed colored output test
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com >
2022-02-09 09:29:36 +09:00
DustInDark
df30adfdef
changed hashmap library to tuneup #368 ( #369 )
...
* added color code emit_csv test
* replaced HashMap and HashSet to hashbrown #368
* removed debug output in test #368
* fixed colored test
2022-02-09 01:59:39 +09:00
DustInDark
84de8d01af
remove yaml ignore check#271 ( #385 )
...
* removed yaml ignore label check #271
* moved exclude rule filter check #271
* fixed colored test
2022-02-09 01:59:12 +09:00
kazuminn
d1597b2322
ルール場所指定オプションでファイルを扱えるようにする ( #364 )
...
* add only rule file path in --rules
* add error handling for metadata
* refactor
* add test
* rename test function
2022-01-31 12:09:25 +09:00
Alan Smithee
f70be3419a
removed csv quote when output result to stdout #381
2022-01-30 13:23:33 +09:00
DustInDark
b12029de5c
Feature/colorlog#239 ( #365 )
...
* added color carete #239
* added hex library
* added color config file parser #239
* added color output feature #239
* changed fast hashmap library
* added color output description(Japanese) #239
* added color output description(English) #239
* fixed medium level typo
* removed white color font level #239
* added trim and loose colorcode condition #239
* fixed hex convert error panic #239
- output warn and go next iterator when happen hex convert panic
- added user input in hex convert warn output to use easily
2022-01-26 01:39:14 +09:00
kazuminn
15ee980711
exclude-rules.txtとnoisy-rules.txtをコメントに対応 ( #362 )
...
* add exclude files comments feature
* trim()
* add error handling and split function
* add id validation
* add comments
* cargo fmt
* fix error statment
* change -full.txt to .txt
* change alert to warn
2022-01-20 23:12:41 +09:00
DustInDark
9c7353a2e9
Feature/except hidden file#335 ( #339 )
...
* added except hidden file load #335
* fixed except hidden file in collect evtx #335
2022-01-13 22:19:59 +09:00
Tanaka Zakku
d9624be752
delete extra white space
2021-12-24 14:56:23 +09:00
DustInDark
207fcb312c
fixed output error if config directory is not found #347
2021-12-24 13:27:51 +09:00
DustInDark
3097ff2ac3
added process case of no exist config files #347
2021-12-24 08:48:38 +09:00
Tanaka Zakku
8f9ff165ec
small format fix
2021-12-23 17:52:19 +09:00
DustInDark
b4a66a8e6f
inserted usage newline
2021-12-23 17:16:48 +09:00
DustInDark
c43624dcb2
changed outputs #344
2021-12-23 17:09:26 +09:00
DustInDark
716e0a182a
changed no outpu rule parse result with -s option #343
2021-12-23 15:45:11 +09:00
DustInDark
7813fd6ac6
reduced statistics start output each file #341
2021-12-23 11:42:58 +09:00
DustInDark
9b382df001
fixed output flag process #341
2021-12-23 11:39:52 +09:00
DustInDark
09782f02a9
added newline
2021-12-23 11:35:34 +09:00
DustInDark
6b5283b28b
added no detection when statistics option enabled. #341
2021-12-23 11:33:10 +09:00
DustInDark
f2445ae093
changed output field to details field in yaml data oftest case
2021-12-23 08:59:41 +09:00
DustInDark
2250c4b2c3
fixed error
2021-12-22 20:38:21 +09:00
DustInDark
bf0d3b12f2
fixed output rule warn #336
2021-12-22 18:29:17 +09:00
DustInDark
98a6ca8adc
adjust change field name from output to details in rule file #337
2021-12-22 18:15:34 +09:00
Yamato Security
67f0ee007b
Merge pull request #316 from Yamato-Security/feature/output_error_log_file_and_options#301
...
fixed #301 #303 #309
2021-12-22 16:08:13 +09:00
DustInDark
a14702dc76
fixed contents and rule-count #333
2021-12-22 15:25:00 +09:00
DustInDark
3412434d99
fixed error
2021-12-22 14:56:10 +09:00
Yamato Security
f54985075b
Merge pull request #325 from Yamato-Security/fix/header_name_fix#320
...
changed output header #320
2021-12-22 11:09:02 +09:00
DustInDark
8876fc5f65
added newline
2021-12-22 09:41:06 +09:00
James Takai / hach1yon
ea685fb75a
Feature/fix count() ( #327 )
2021-12-22 09:10:28 +09:00
DustInDark
a0cc36c67e
fixed test error #320
2021-12-21 22:31:21 +09:00
DustInDark
2b76103028
fixed output #301
...
- To save error log, created empty folder logs
- fixed output
2021-12-21 21:50:33 +09:00
DustInDark
d0a7040275
changed output header #320
2021-12-21 20:55:46 +09:00
DustInDark
bccdd8fef9
fixed error
...
- changed writer from stderr to bufwriter
- changed alert,warn function arg fro String to borrow-String
2021-12-21 14:44:26 +09:00
DustInDark
f1c9418ab4
fixed errorlog create logic
2021-12-21 14:40:23 +09:00
DustInDark
13494ec609
fixed tests
...
errored no defined error file in alert function call
2021-12-21 02:53:46 +09:00
