Tanaka Zakku
ad61425904
update
2022-04-15 17:53:33 +09:00
DustInDark
bcf8a33e8c
v1.2 pre-release marge ( #495 )
...
* Fix/fix clippy warn (#434 )
- Fixed following Clippy Warnings(previous warning count: 671 -> after: 4)
- clippy::needless_return
- clippy::println_empty_string
- clippy::redundant_field_names
- clippy::single_char_pattern
- clippy::len_zero
- clippy::iter_nth_zero
- clippy::bool_comparison
- clippy::question_mark
- clippy::needless_collect
- clippy::unnecessary_unwrap
- clippy::ptr_arg
- clippy::needless_collect
- clippy::needless_borrow
- clippy::new_without_default
- clippy::assign_op_pattern
- clippy::bool_assert_comparison
- clippy::into_iter_on_ref
- clippy::deref_addrof
- clippy::while_let_on_iterator
- clippy::match_like_matches_macro
- clippy::or_fun_call
- clippy::useless_conversion
- clippy::let_and_return
- clippy::redundant_clone
- clippy::redundant_closure
- clippy::cmp_owned
- clippy::upper_case_acronyms
- clippy::map_identity
- clippy::unused_io_amount
- clippy::assertions_on_constants
- clippy::op_ref
- clippy::useless_vec
- clippy::vec_init_then_push
- clippy::useless_format
- clippy::bind_instead_of_map
- clippy::bool_comparison
- clippy::clone_on_copy
- clippy::too_many_arguments
- clippy::module_inception
- fixed clippy::needless_lifetimes
- fixed clippy::borrowed_box (Thanks for helping by hach1yon!)
* Merge main and output fix#443#444 (#445 )
* removed tools/sigmac (#441 )
* removed tools/sigmac
- moved tools/sigmac to hayabusa-rules repo
* fixed doc link tools/sigmac
* fixed submodule track
* fixed submodule track from latest to v1.1.0 tag
* fixed link
* erased enter #444
* erased enter #444
* reverted logo enter
* fixed rules submodule target commit #444
Co-authored-by: Yamato Security <71482215+YamatoSecurity@users.noreply.github.com >
* readme update screenshots etc (#448 )
* Opensslを静的にコンパイルするためにCargo.tomlの設定変更 (#437 )
* cargo update - openssl static
* updated cargo
* macos2apple
* cargo update
* cargo update
* aliasキーがない場合もEvent.EventDataを自動で走査する (#442 )
* add no event key
* support not-register-alias search
* added checking EventData when key do not match in alias #290
- added checking key in Event.EventData, if key is not exist in eventkey_alias.txt.
* cargo fmt
* fixed panic when filter files does not exists
* fixed errorlog format when filter config files does not exist
Co-authored-by: DustInDark <nextsasasa@gmail.com >
* changed downcast library from mopa to downcast_rs #447 (#450 )
* Fixed Clippy Warnings (#451 )
* fixed clippy warn
* fixed cargo clippy warnging
* fixed clippy warngings in clippy ver 0.1.59
* fixed clippy warnings clippy::unnecessary_to_owned
* added temporary blackhat arsenal badge
* added rust report card badges #453
* added repository maintenance levels badge #453
* documentation update macOS usage etc
* update
* added clippy workflow #428 (#429 )
* added clippy workflow #428
* fixed action yaml to run clippy #428
* fixed indent
* fixed workflow
* fixed workflow error
* fixed indent
* changed no annotation #428
* adujusted annotation version
* fixed clippy::needless_match
* remove if let exception
* removed unnecessary permission check #428
* statistics event id update (#457 )
* Feature/#440 refactoring #395 (#464 )
* updated submodule
* fix degrade for pull req #464 (#468 )
* fix degrade for pull req #464
* add trim
* Fearture/ added output update result#410 (#452 )
* add git2 crate #391
* added Update option #391
* updated readme #391
* fixed cargo.lock
* fixed option if-statement #391
* changed utc short option and rule-update short option #391
* updated readme
* updated readme
* fixed -u long option & version number update #391
* added fast-forwarding rules repository #391
* updated command line option #391
* moved output logo prev update rule
* fixed readme #391
* removed recursive option in readme
* changed rules update from clone and pull to submodule update #391
* fixed document
* changed unnecessary clone recursively to clone only
* English message update.
* cargo fmt
* English message update. ( 4657c35e5c#420
* fixed error #410
* changed update rule list seq
* added test
* fixed output #410
* fixed output and fixed output date field when modified field is lacked #410
* fixed compile error
* fixed output
- added enter after Latest rule update output
- added output when no exist new rule
- fixed Latest rule update date format
- changed output from 'Latest rule update' to 'Latest rules update'
* fixed compile error
* changed modified date source from rules folder to each yml rule file
* formatting use chrono in main.rs
* merge develop clippy ci
* fixed output when no update rule #410
- removed Latest rule update
- no output "Rules update successfully" when No rule changed
* Change English
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com >
* Remove unnecessary code from timeline_event_info and rename files for… (#470 )
* Remove unnecessary code from timeline_event_info and rename files for issue462
* Remove unnecessary code #462
* add equalsfield pipe (#467 )
* Enhancement: add config config #456 (#471 )
* added config option #456
* added process of option to speicifed config folder #456
following files adjust config option.
* noisy_rules.txt
* exclude_rules.txt
* fixed usage in readme
* updated rules submodule:
* fixed process when yml file exist in .git folder
* ignore when yml file exist in .git folder
* Add: --level-tuning option's outline
* Add: read Rule files
* Add: input rule_level.txt files & read rules
* cargo fmt
* Add: level-tuning function
* Reface: split to options file
* WIP: Text overwrite failed...
* Fix: Text overwrite was failed
* Add: Error handlings
* Add: id, level validation
* mv: IDS_REGEX to configs file
* fix: level tuning's file name
* Cargo fmt
* Pivot Keyword List機能の追加 (#412 )
* add get_pivot_keyword() func
* change function name and call it's function
* [WIP] support config file
* compilete output
* cargo fmt
* [WIP] add test
* add test
* support -o option in pivot
* add pivot mod
* fix miss
* pass test in pivot.rs
* add comment
* pass all test
* add fast return
* fix output
* add test config file
* review
* rebase
* cargo fmt
* test pass
* fix clippy in my commit
* cargo fmt
* little refactor
* change file input logic and config format
* [WIP] change output
* [wip] change deta structure
* change output & change data structure
* pass test
* add config
* cargo fmt & clippy & rebase
* fix cllipy
* delete /rules/ in .gitignore
* clean comment
* clean
* clean
* fix rebase miss
* fix rebase miss
* fix clippy
* file name output on -o to stdout
* add pivot_keywords.txt to ./config
* updated english
* Documentation update
* cargo fmt and clean
* updated translate japanese
* readme update
* readme update
Co-authored-by: DustInDark <nextsasasa@gmail.com >
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com >
* Add: test
* Add: README.md
* Cargo fmt
* Use
#[cfg(test)]
* Fixed output stop when control char exist in windows terminal (#485 )
* added control character filter in details #382
* fixed document
- removed fixed windows teminal caution in readme
* fixed level tuning test and added test files #390
* changed level_tuning.txt header from next_level to new_level
* fixed convert miss change to low level
* added run args rules path to check test easy #390
* fixed comment out processing in level_tuning.txt
* fixed config to show level-tuning option
* fixed level-tuning option usage from required to option
* reduce output mitre attack detail tachnique No. by config file (#483 )
* reduced mitre attck tag output by config file #477
* prepared 1.2.0 version toml
* added test files and mitre attck strategy tag file #477
* fixed cargo.toml version
* updated cargo.lock
* output tag english update
* cargo fmt
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com >
* Fix: test file's path was incorrect
* Add: add test_files/config/level_tuning.txt
* Add: Flush method.
* inserted debug data
* reverted config usage
* fixed test yaml file path
* Feature/#216 output allfields csvnewcolumn (#469 )
* refactoring
* refactoring
* under constructing
* underconstructing
* under construction
* underconstructing
* fix existing testcase
* finish implement
* fmt
* add option
* change name
* fix control code bug
* fix disp
* change format and fix testcase
* fix help
* Fix: show usage when hayabusa has no args
* rm: debug line
* Enhance/warning architecture#478 (#482 )
* added enhance of architecture check #478
* changed check architecture process after output logo #478
* English msg update
* fixed detect method of os-bit to windows and linux
* removed mac and unix architecture and binary and updated its process of windows
* fix clippy
* added check on Wow64 env #478
* Update contributors.txt
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com >
* added --level-tuning option to usage
* Revert "added --level-tuning option to usage"
This reverts commit e6a74090a3#486 )
* added feature of tag output reducing to agg condition #477 (#488 )
* changed level output from informational to info #491
* updated rules submodule
* v1.2 changelog update (#473 )
* changelog update
* Update CHANGELOG.md
added contributor in "Fields that are not defined in eventkey_alias.txt will automatically be searched in Event.EventData."
ref #442
* Update CHANGELOG-Japanese.md
Fields that are not defined in eventkey_alias.txt will automatically be searched in Event.EventData.
added contributor in "Fields that are not defined in eventkey_alias.txt will automatically be searched in Event.EventData."
ref #442
* Update CHANGELOG.md
added bug fixes (#444 ) and `Performance and. accuracy` add contributor ref(#395 )
* Update CHANGELOG-Japanese.md
* Translated v1.2 change log to Japanese
v1.2の内容を日本語に修正
* fixed typo
added lacked back quote.
* added description
added following issue and pr description to readme
- #216 / #469 L8
- #390 / #459 L9
- #478 / #482 L19
- #477/ #483 L20
* added description README.md
added following issue and pr description to readme
- #216 / #469 L8
- #390 / #459 L9
- #478 / #482 L19
- #477/ #483 L20
* changelog update
* changelog update
* update
Co-authored-by: DustInDark <nextsasasa@gmail.com >
* updated rules #493 (#494 )
* Resolve conflict develop (#496 )
* removed tools/sigmac (#441 )
* removed tools/sigmac
- moved tools/sigmac to hayabusa-rules repo
* fixed doc link tools/sigmac
* fixed submodule track
* fixed submodule track from latest to v1.1.0 tag
* fixed link
* fixed rules submodule targe #444
* updated submodule
* updated rules submodule
Co-authored-by: Yamato Security <71482215+YamatoSecurity@users.noreply.github.com >
Co-authored-by: Yamato Security <71482215+YamatoSecurity@users.noreply.github.com >
Co-authored-by: kazuminn <warugaki.k.k@gmail.com >
Co-authored-by: James / hach1yon <32596618+hach1yon@users.noreply.github.com >
Co-authored-by: garigariganzy <tosada31@hotmail.co.jp >
Co-authored-by: itiB <is0312vx@ed.ritsumei.ac.jp >
2022-04-15 12:13:00 +09:00
DustInDark
2b5837dfc8
updated rules ( #497 )
2022-04-15 12:12:22 +09:00
DustInDark
26d8de2997
Resolve conflict develop ( #496 )
...
* removed tools/sigmac (#441 )
* removed tools/sigmac
- moved tools/sigmac to hayabusa-rules repo
* fixed doc link tools/sigmac
* fixed submodule track
* fixed submodule track from latest to v1.1.0 tag
* fixed link
* fixed rules submodule targe #444
* updated submodule
* updated rules submodule
Co-authored-by: Yamato Security <71482215+YamatoSecurity@users.noreply.github.com >
2022-04-15 12:01:35 +09:00
DustInDark
1e014620cf
updated rules #493 ( #494 )
2022-04-15 11:48:17 +09:00
Yamato Security
a09baeb7d2
v1.2 changelog update ( #473 )
...
* changelog update
* Update CHANGELOG.md
added contributor in "Fields that are not defined in eventkey_alias.txt will automatically be searched in Event.EventData."
ref #442
* Update CHANGELOG-Japanese.md
Fields that are not defined in eventkey_alias.txt will automatically be searched in Event.EventData.
added contributor in "Fields that are not defined in eventkey_alias.txt will automatically be searched in Event.EventData."
ref #442
* Update CHANGELOG.md
added bug fixes (#444 ) and `Performance and. accuracy` add contributor ref(#395 )
* Update CHANGELOG-Japanese.md
* Translated v1.2 change log to Japanese
v1.2の内容を日本語に修正
* fixed typo
added lacked back quote.
* added description
added following issue and pr description to readme
- #216 / #469 L8
- #390 / #459 L9
- #478 / #482 L19
- #477/ #483 L20
* added description README.md
added following issue and pr description to readme
- #216 / #469 L8
- #390 / #459 L9
- #478 / #482 L19
- #477/ #483 L20
* changelog update
* changelog update
* update
Co-authored-by: DustInDark <nextsasasa@gmail.com >
2022-04-15 11:43:40 +09:00
Tanaka Zakku
aa74af4177
update
2022-04-15 11:14:42 +09:00
Tanaka Zakku
c14965f129
update
2022-04-15 07:52:47 +09:00
Tanaka Zakku
e62e5e09fb
Elastic Documentation
2022-04-15 07:24:38 +09:00
Yamato Security
c030144bcb
Merge pull request #492 from Yamato-Security/491-output_informational_level_to_info
...
changed output informational level to info
2022-04-15 07:18:40 +09:00
DustInDark
708427c379
updated rules submodule
2022-04-14 22:45:58 +09:00
DustInDark
ac50a251ee
changed level output from informational to info #491
2022-04-14 22:45:04 +09:00
DustInDark
d4aec68d3b
added feature of tag output reducing to agg condition #477 ( #488 )
2022-04-14 21:32:22 +09:00
Yamato Security
9da46b90a8
twitter link fix ( #486 )
2022-04-13 13:10:13 +09:00
Yamato Security
320ded5c43
Merge pull request #459 from Yamato-Security/feature/level-tuning#390
...
Feature/level tuning#390
2022-04-12 08:54:47 +09:00
Tanaka Zakku
c09f9d4f5f
small english fix
2022-04-12 08:38:57 +09:00
itiB
9fa60dd26d
Add: show logo, and some infos
2022-04-12 00:27:02 +09:00
itiB
a1812e013b
rm: duplicated test & fix test name
2022-04-12 00:20:25 +09:00
Tanaka Zakku
4af7958ff6
typo fix
2022-04-11 20:16:39 +09:00
Tanaka Zakku
30939f8ab3
typo fix
2022-04-11 18:17:52 +09:00
Tanaka Zakku
0db51b1f87
readme, version, cargo update
2022-04-11 18:05:56 +09:00
Yamato Security
b67aaebf8a
Update README-Japanese.md
2022-04-11 17:29:38 +09:00
Yamato Security
861e1c5c4e
Merge branch 'develop' into feature/level-tuning#390
2022-04-11 17:24:28 +09:00
Tanaka Zakku
1dc9a11d94
readme update
2022-04-11 09:15:23 +09:00
DustInDark
265d42df30
Revert "added --level-tuning option to usage"
...
This reverts commit e6a74090a3
2022-04-10 16:57:04 +09:00
DustInDark
e6a74090a3
added --level-tuning option to usage
2022-04-10 16:40:37 +09:00
DustInDark
620b6f375d
Enhance/warning architecture#478 ( #482 )
...
* added enhance of architecture check #478
* changed check architecture process after output logo #478
* English msg update
* fixed detect method of os-bit to windows and linux
* removed mac and unix architecture and binary and updated its process of windows
* fix clippy
* added check on Wow64 env #478
* Update contributors.txt
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com >
2022-04-10 02:21:24 +09:00
itiB
bb834618d6
rm: debug line
2022-04-10 00:52:06 +09:00
itiB
8061733fd9
Fix: show usage when hayabusa has no args
2022-04-10 00:50:40 +09:00
hach1yon
7d37e07219
Feature/#216 output allfields csvnewcolumn ( #469 )
...
* refactoring
* refactoring
* under constructing
* underconstructing
* under construction
* underconstructing
* fix existing testcase
* finish implement
* fmt
* add option
* change name
* fix control code bug
* fix disp
* change format and fix testcase
* fix help
2022-04-08 20:39:28 +09:00
DustInDark
4cc8d80d20
fixed test yaml file path
2022-04-07 02:30:15 +09:00
DustInDark
0bac82699f
reverted config usage
2022-04-07 02:22:57 +09:00
DustInDark
3a1eeca555
Merge branch 'feature/level-tuning#390' of github.com:Yamato-Security/hayabusa into feature/level-tuning#390
2022-04-07 01:56:00 +09:00
DustInDark
b8c442ca22
inserted debug data
2022-04-07 01:55:03 +09:00
itiB
f3a679d845
Add: Flush method.
2022-04-07 01:44:02 +09:00
itiB
4056975b1d
Add: add test_files/config/level_tuning.txt
2022-04-07 01:33:35 +09:00
itiB
e119ba8f14
Fix: test file's path was incorrect
2022-04-07 01:24:26 +09:00
DustInDark
d6efb5107a
reduce output mitre attack detail tachnique No. by config file ( #483 )
...
* reduced mitre attck tag output by config file #477
* prepared 1.2.0 version toml
* added test files and mitre attck strategy tag file #477
* fixed cargo.toml version
* updated cargo.lock
* output tag english update
* cargo fmt
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com >
2022-04-07 00:47:08 +09:00
DustInDark
e715935bb6
fixed level-tuning option usage from required to option
2022-04-07 00:17:51 +09:00
DustInDark
a35e8ad5cb
fixed config to show level-tuning option
2022-04-07 00:08:32 +09:00
DustInDark
6931724ec4
fixed comment out processing in level_tuning.txt
2022-04-06 23:30:32 +09:00
DustInDark
0c27b13c85
added run args rules path to check test easy #390
2022-04-06 23:28:55 +09:00
DustInDark
3b4c4dd36e
fixed convert miss change to low level
2022-04-06 22:47:28 +09:00
DustInDark
cd8c856d05
changed level_tuning.txt header from next_level to new_level
2022-04-06 22:46:35 +09:00
DustInDark
dab91e5e61
fixed level tuning test and added test files #390
2022-04-06 22:34:32 +09:00
DustInDark
a5bf79cf83
Fixed output stop when control char exist in windows terminal ( #485 )
...
* added control character filter in details #382
* fixed document
- removed fixed windows teminal caution in readme
2022-04-06 08:40:28 +09:00
itiB
11b5a3d394
Use
...
#[cfg(test)]
2022-04-06 02:04:23 +09:00
itiB
04c0e6ae07
Cargo fmt
2022-04-06 01:55:19 +09:00
itiB
52bc918cfb
Add: README.md
2022-04-06 01:54:09 +09:00
itiB
51f8d405f8
Add: test
2022-04-06 01:34:48 +09:00
