Commit Graph

421 Commits

Author SHA1 Message Date
DustInDark
a17d0d4e37 display EventRecordID (#549)
* added -R --display-record-id #548

* fixed test data #548

* cargo fmt

* added describe of -R --display-record-id option to README #548

* updated changelog #548

* readme update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-27 22:19:40 +09:00
DustInDark
69c41c4859 540 enhancement print total evtx file size (#545)
* added ByteSize crate  #540

* displayed total evtx file size #540

* updated CHANGELOG #540

* cargo fmt

* added blank like, updated cargo

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-27 11:11:44 +09:00
DustInDark
7be79efc21 fixed event timeline frequency font color changed when use f option #542 (#544)
* fixed event timeline frequency font color changed when use f option #542

* fixed duplicate count detection to same record in data reduction #543

* fixed error #542

* fixed fmt

* fixed error

* changed no frequency timeline output when events is less than 5 record.

* Error message update

* added newline after progress bar

* fixed  frequency timeline logic to pass test

* cargo fmt

* Added CHANGELOG #533 #538 #525

* changelog update

* updated readme #533 #538

* readme update

* startup logo update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-27 10:13:40 +09:00
DustInDark
dac2a80726 Display total event count and data reduction (#539)
* added reduction percent and all records cnt #538

* version updated v1.3.0-dev

* added events word

* added side margin to sparkline #533

* fixed centering

* change margin from 5 to 3

* readme warning typo fix

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-24 11:13:43 +09:00
DustInDark
947f65a7bc output timeline histogram (#535)
* added krapslog in cargo

* added output timeline histgram feature #533

* added termilan_size to cargo

* adjust timeline histgram width size  to terminal width #533

* added section output in timeline histogram #533

* centering timeline histgram title #533
2022-05-23 21:32:49 +09:00
DustInDark
995aa1d75b output not found field to n/a (#531)
* changed no found placeholder output to n/a #528

* added n/a output to details when not found placeholder

* added v1.3.0 changelog describe and #528 enhance

* fixed typo and fixed markdown format

* fixed test

* readme, changelog, version update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-23 00:20:08 +09:00
DustInDark
684c8a9688 525 show technique tags (#534)
* added --all-tags optiojn #525

- exclude load output_tag.txt when --all-tags option is true

* fixed output to MitreAttack column #525

* added test

* added period

* updated usage in readme

* added test file

* added all-tags option in readme

* readme update

* fixed all-tags option description in help option

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-23 00:19:04 +09:00
Yamato Security
6414af3609 readme update (#529) 2022-05-20 15:05:34 +09:00
DustInDark
a973b5b0f6 added exclude condition to .git folder #524 2022-05-19 20:57:57 +09:00
DustInDark
b47561a79c remove color option (#518)
* removed used crate in color option and add term color #481

* removed level_color.txt due to fix output color #481

* removed color definition by file

* update cargo

* removed color definiton by true type vec

* added hex crate

* added level_color.txt and color output to command prompt and powershell #481

* adjust termcolor crate
* restored level_color.txt

* remove c option #481

* fixed document #481

* fixed stdoutput test

* add no-color option #481

- disable color output when no-color option set

* added no-color option document

* Fixed clipy err

* doc, changelog, cargo pkg update

* changelog and rules update

* version up to 1.2.2

* readme and changelog update

* reformat to markdown lint

* adjusted logon summary generator section in japanese readme to english
 readme

* fixed typo in readme

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-17 11:32:57 +09:00
DustInDark
d654c2cb6b logon summary (#523)
* logon summary #110

* logon summary #110

* english update

* add sort #110

* add sort #110

* Formatting the output string

* Fixed the check process.

* added document #110

* Fixed login failure eventID.

* Fixed clipy err

* prevent rule load output with logon-summary option #110

* fixed bug of  level-tuning execute when option is -s or -L only #110

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-17 09:36:45 +09:00
DustInDark
9092cc2301 fixed version number #521 (#522)
* fixed version number #521

* Fixed clipy err

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
2022-05-17 09:00:12 +09:00
DustInDark
2c0b057bc0 added twitter badge and link #519 (#520)
* added twitter badge and link #519

* Fixed clipy err

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
2022-05-15 23:46:32 +09:00
DustInDark
274123256a remove unnecessary hard reset 2022-04-22 15:31:36 +09:00
DustInDark
0414b5af78 changed force update to hayabusa-rules #490 (#509)
* changed force update to hayabusa-rules #490

* added note when update option is used

* readme update

* cargo and changelog updates

* changed jp translation

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-04-21 21:20:31 +09:00
Yamato Security
fc271c2076 Merge pull request #512 from Yamato-Security/511-move-level_tuning.txt
level_tuning.txtのパスを./rules/configに移動
2022-04-20 20:51:14 +09:00
DustInDark
ca735817d4 removed comment out import 2022-04-20 18:32:41 +09:00
DustInDark
06ccf8382b fixed to include noisy and exclude rules when level tuning #511 2022-04-20 18:30:05 +09:00
DustInDark
b43eb853e9 Added Channel column and Channel Abbreviations (#508)
* added Channel output #504

* added test #504

* fixed clippy warnings

* fixed convert serde value to Channel #504

* added channel output config #504

* added doc #504

* added Channel column and Channel addreviation

* fixed file name typo

* changed channel position #504

* fixed markdown warnings in CHANGELOG

* readme update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-04-20 16:12:53 +09:00
Tanaka Zakku
c6b2879eb5 change path 2022-04-20 10:16:25 +09:00
DustInDark
ac50a251ee changed level output from informational to info #491 2022-04-14 22:45:04 +09:00
DustInDark
d4aec68d3b added feature of tag output reducing to agg condition #477 (#488) 2022-04-14 21:32:22 +09:00
Tanaka Zakku
c09f9d4f5f small english fix 2022-04-12 08:38:57 +09:00
itiB
9fa60dd26d Add: show logo, and some infos 2022-04-12 00:27:02 +09:00
itiB
a1812e013b rm: duplicated test & fix test name 2022-04-12 00:20:25 +09:00
Tanaka Zakku
0db51b1f87 readme, version, cargo update 2022-04-11 18:05:56 +09:00
Yamato Security
861e1c5c4e Merge branch 'develop' into feature/level-tuning#390 2022-04-11 17:24:28 +09:00
DustInDark
265d42df30 Revert "added --level-tuning option to usage"
This reverts commit e6a74090a3.
2022-04-10 16:57:04 +09:00
DustInDark
e6a74090a3 added --level-tuning option to usage 2022-04-10 16:40:37 +09:00
DustInDark
620b6f375d Enhance/warning architecture#478 (#482)
* added  enhance of architecture check #478

* changed check architecture process after output logo #478

* English msg update

* fixed detect method of os-bit to windows and linux

* removed mac and unix architecture and binary and updated its process of windows

* fix clippy

* added check on Wow64 env #478

* Update contributors.txt

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-04-10 02:21:24 +09:00
itiB
bb834618d6 rm: debug line 2022-04-10 00:52:06 +09:00
itiB
8061733fd9 Fix: show usage when hayabusa has no args 2022-04-10 00:50:40 +09:00
hach1yon
7d37e07219 Feature/#216 output allfields csvnewcolumn (#469)
* refactoring

* refactoring

* under constructing

* underconstructing

* under construction

* underconstructing

* fix existing testcase

* finish implement

* fmt

* add option

* change name

* fix control code bug

* fix disp

* change format and fix testcase

* fix help
2022-04-08 20:39:28 +09:00
DustInDark
4cc8d80d20 fixed test yaml file path 2022-04-07 02:30:15 +09:00
DustInDark
0bac82699f reverted config usage 2022-04-07 02:22:57 +09:00
DustInDark
3a1eeca555 Merge branch 'feature/level-tuning#390' of github.com:Yamato-Security/hayabusa into feature/level-tuning#390 2022-04-07 01:56:00 +09:00
DustInDark
b8c442ca22 inserted debug data 2022-04-07 01:55:03 +09:00
itiB
f3a679d845 Add: Flush method. 2022-04-07 01:44:02 +09:00
itiB
e119ba8f14 Fix: test file's path was incorrect 2022-04-07 01:24:26 +09:00
DustInDark
d6efb5107a reduce output mitre attack detail tachnique No. by config file (#483)
* reduced mitre attck tag output by config file #477

* prepared 1.2.0 version toml

* added test files and mitre attck strategy tag file #477

* fixed cargo.toml version

* updated cargo.lock

* output tag english update

* cargo fmt

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-04-07 00:47:08 +09:00
DustInDark
e715935bb6 fixed level-tuning option usage from required to option 2022-04-07 00:17:51 +09:00
DustInDark
a35e8ad5cb fixed config to show level-tuning option 2022-04-07 00:08:32 +09:00
DustInDark
6931724ec4 fixed comment out processing in level_tuning.txt 2022-04-06 23:30:32 +09:00
DustInDark
0c27b13c85 added run args rules path to check test easy #390 2022-04-06 23:28:55 +09:00
DustInDark
3b4c4dd36e fixed convert miss change to low level 2022-04-06 22:47:28 +09:00
DustInDark
dab91e5e61 fixed level tuning test and added test files #390 2022-04-06 22:34:32 +09:00
DustInDark
a5bf79cf83 Fixed output stop when control char exist in windows terminal (#485)
* added control character filter in details #382

* fixed document

- removed fixed windows teminal caution in readme
2022-04-06 08:40:28 +09:00
itiB
11b5a3d394 Use
#[cfg(test)]
2022-04-06 02:04:23 +09:00
itiB
04c0e6ae07 Cargo fmt 2022-04-06 01:55:19 +09:00
itiB
51f8d405f8 Add: test 2022-04-06 01:34:48 +09:00