CSEC_PUBLIC/hayabusa
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
921 Commits 6 Branches 18 Tags
9ff2fd19ca4718814083feb3ded97fda8522766d
Commit Graph

111 Commits

Author SHA1 Message Date
DustInDark
7937ea41d5 Merge branch 'main' into 596-new-feature-exclude-status 2022-06-24 23:43:44 +09:00
DustInDark
2dc5035e7e updated readme jp 2022-06-23 19:43:22 +09:00
DustInDark
d24a3e3b58 updated readme #596 2022-06-21 15:12:32 +09:00
DustInDark
b4ef082525 Merge pull request #594 from Yamato-Security/586-evtx-files-with-different-extension-option 
evtx files with different extension option( --add-file-extentions)
 2022-06-21 12:09:41 +09:00
Tanaka Zakku
e37371a077 update readme and option name 2022-06-21 11:00:32 +09:00
Tanaka Zakku
8b532af5c6 readme and changelog update 2022-06-20 22:32:52 +09:00
DustInDark
c413bd1872 updated readme #586 2022-06-20 20:24:35 +09:00
DustInDark
4b2c047f95 fixed ProviderName typo #359 2022-06-20 13:55:09 +09:00
DustInDark
158a1e34ed fixed document #359 2022-06-20 13:48:44 +09:00
DustInDark
6ccda3add8 updated readme #359 2022-06-20 00:06:07 +09:00
DustInDark
acfc3437ba removed correlations 2022-06-19 11:44:47 +09:00
Tanaka Zakku
47c0eee38c updated cargo, readme, usage 2022-06-19 10:08:59 +09:00
DustInDark
ac246522d4 updated usage in readme 2022-06-17 19:04:55 +09:00
DustInDark
334c401cda Merge branch 'main' into clap_update_v3 2022-06-14 22:53:52 +09:00
Tanaka Zakku
ce51728070 v1.3.2 2022-06-13 08:55:01 +09:00
DustInDark
acf81b1d64 updated readme #413 2022-06-13 02:49:54 +09:00
DustInDark
e6a77aee90 updated readme #579 2022-06-11 05:05:09 +09:00
DustInDark
0ca89509b9 updated readme #579 2022-06-10 16:51:26 +09:00
DustInDark
9abff480e9 Merge branch 'main' into 574-add-more-timestamp-format-options 2022-06-10 12:00:35 +09:00
Tanaka Zakku
dce84b4185 changelog readme update 2022-06-09 10:04:59 +09:00
Tanaka Zakku
35f4a92f21 updated readme and usage examples 2022-06-09 09:20:49 +09:00
DustInDark
20c4aee941 fixed document #487 2022-06-09 02:37:32 +09:00
DustInDark
8aa47426c9 described new feature it for Data record #487 2022-06-09 02:22:22 +09:00
DustInDark
b0f1c6abd1 addded --visualize-timeline alias in readme jp 2022-06-09 02:14:39 +09:00
DustInDark
7e013c8f70 updated readme #487 2022-06-09 02:09:24 +09:00
DustInDark
a9204e1c7d added three new time format option in readme jp #574 2022-06-08 19:05:08 +09:00
DustInDark
22cd39b276 fixed rfc3339 option output format in readme jp #574 2022-06-08 19:00:34 +09:00
DustInDark
d00737c033 add view event frequency timeline option (#567) 
* added option visual-timeline option #566

* updated readme #566

* updated changelog #566

* updated rules

* cargo fmt

* change --visual-timeline to --visualize-timeline

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-06-05 17:41:08 +09:00
Yamato Security
bdd841f872 V1.3.0 release finalization (#564) 
* readme, cargo, usages  update

* readme update
 2022-06-04 06:53:40 +09:00
DustInDark
9e1fabb21e display computers with most alerts (#558) 
* added top3 alert by level and computer #557

* cargo fmt

* updated changelog #557

* updated readme #557

* added output when one computer name in level. #557

* updated screenshot

* updated rules

* add SOF-ELK link

* readme update

* readme update

* cargo fmt

* change display num from 3 to 5 #557

* excluded count when computer name is "-" in event and fixed output #557

- removed warn output.

- changed output when count is 0.

* cargo fmt

* changed computer name summary to filter unique computer name and rule path pair #557

* cargo fmt

* readme update change order of output

* changelog update

* fixed crash bug when level is not valid #560 #557

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-06-03 12:01:14 +09:00
DustInDark
2dcf960d51 display default channel name if not defined (#555) 
* displayed other channel data in Channel column #553

* updated changelog #553

* updated changelog

* readme and channel abbreviataions update

* changelog update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-06-01 13:01:14 +09:00
DustInDark
7a7afe732c most detections summary by date (#551) 
* added Date with most detections by level #550

* cargo fmt

* updated changelog #550

* updated readme #550

* removed  most undefined detections date in summary #550

* cargo fmt

* add space after level tuning

* changed undefined rule detection count to no show #550

* cargo fmt

* readme update

* channel abb update

* channel abb update

* readme update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-05-31 22:29:51 +09:00
DustInDark
2653e87588 start timeline and end timeline do not work (#547) 
* fixed dont work start-timeline and end-timeline #546

* fixed condition

* added changelog #546

* changelog update

* changed stop analysis when start-timeline and end-timeline happend parse error #546

* cargo fmt

* fixed alert message

* fixed lack of timestamp convert

* cargo fmt

* readme/usage update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-05-28 10:07:39 +09:00
DustInDark
a17d0d4e37 display EventRecordID (#549) 
* added -R --display-record-id #548

* fixed test data #548

* cargo fmt

* added describe of -R --display-record-id option to README #548

* updated changelog #548

* readme update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-05-27 22:19:40 +09:00
DustInDark
7be79efc21 fixed event timeline frequency font color changed when use f option #542 (#544) 
* fixed event timeline frequency font color changed when use f option #542

* fixed duplicate count detection to same record in data reduction #543

* fixed error #542

* fixed fmt

* fixed error

* changed no frequency timeline output when events is less than 5 record.

* Error message update

* added newline after progress bar

* fixed  frequency timeline logic to pass test

* cargo fmt

* Added CHANGELOG #533 #538 #525

* changelog update

* updated readme #533 #538

* readme update

* startup logo update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-05-27 10:13:40 +09:00
DustInDark
995aa1d75b output not found field to n/a (#531) 
* changed no found placeholder output to n/a #528

* added n/a output to details when not found placeholder

* added v1.3.0 changelog describe and #528 enhance

* fixed typo and fixed markdown format

* fixed test

* readme, changelog, version update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-05-23 00:20:08 +09:00
DustInDark
684c8a9688 525 show technique tags (#534) 
* added --all-tags optiojn #525

- exclude load output_tag.txt when --all-tags option is true

* fixed output to MitreAttack column #525

* added test

* added period

* updated usage in readme

* added test file

* added all-tags option in readme

* readme update

* fixed all-tags option description in help option

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-05-23 00:19:04 +09:00
Yamato Security
69564103de clarified rules can cause AV alerts (#532) 
* clarified rules can cause AV alerts

* adjusted to en-readme update

* updated latest hayabusa-rules

Co-authored-by: DustInDark <nextsasasa@gmail.com>
 2022-05-21 17:01:32 +09:00
Yamato Security
6414af3609 readme update (#529) 2022-05-20 15:05:34 +09:00
DustInDark
b47561a79c remove color option (#518) 
* removed used crate in color option and add term color #481

* removed level_color.txt due to fix output color #481

* removed color definition by file

* update cargo

* removed color definiton by true type vec

* added hex crate

* added level_color.txt and color output to command prompt and powershell #481

* adjust termcolor crate
* restored level_color.txt

* remove c option #481

* fixed document #481

* fixed stdoutput test

* add no-color option #481

- disable color output when no-color option set

* added no-color option document

* Fixed clipy err

* doc, changelog, cargo pkg update

* changelog and rules update

* version up to 1.2.2

* readme and changelog update

* reformat to markdown lint

* adjusted logon summary generator section in japanese readme to english
 readme

* fixed typo in readme

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-05-17 11:32:57 +09:00
DustInDark
d654c2cb6b logon summary (#523) 
* logon summary #110

* logon summary #110

* english update

* add sort #110

* add sort #110

* Formatting the output string

* Fixed the check process.

* added document #110

* Fixed login failure eventID.

* Fixed clipy err

* prevent rule load output with logon-summary option #110

* fixed bug of  level-tuning execute when option is -s or -L only #110

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-05-17 09:36:45 +09:00
DustInDark
2c0b057bc0 added twitter badge and link #519 (#520) 
* added twitter badge and link #519

* Fixed clipy err

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
 2022-05-15 23:46:32 +09:00
DustInDark
0414b5af78 changed force update to hayabusa-rules #490 (#509) 
* changed force update to hayabusa-rules #490

* added note when update option is used

* readme update

* cargo and changelog updates

* changed jp translation

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-04-21 21:20:31 +09:00
Yamato Security
fc271c2076 Merge pull request #512 from Yamato-Security/511-move-level_tuning.txt 
level_tuning.txtのパスを./rules/configに移動
 2022-04-20 20:51:14 +09:00
DustInDark
b43eb853e9 Added Channel column and Channel Abbreviations (#508) 
* added Channel output #504

* added test #504

* fixed clippy warnings

* fixed convert serde value to Channel #504

* added channel output config #504

* added doc #504

* added Channel column and Channel addreviation

* fixed file name typo

* changed channel position #504

* fixed markdown warnings in CHANGELOG

* readme update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
 2022-04-20 16:12:53 +09:00
Tanaka Zakku
c6b2879eb5 change path 2022-04-20 10:16:25 +09:00
Tanaka Zakku
1b6264a33d readme update 2022-04-16 09:08:49 +09:00
Yamato Security
9da46b90a8 twitter link fix (#486) 2022-04-13 13:10:13 +09:00
Tanaka Zakku
0db51b1f87 readme, version, cargo update 2022-04-11 18:05:56 +09:00
Yamato Security
b67aaebf8a Update README-Japanese.md 2022-04-11 17:29:38 +09:00