Commit Graph

146 Commits

Author SHA1 Message Date
DastInDark
bed2656c5c cargo fmt 2022-07-19 22:22:49 +09:00
DastInDark
cbf96a4743 removed unnecessary processing due to change rule path to rule file #623 2022-07-19 22:20:38 +09:00
DastInDark
591e7f18f1 changed rule path to rule file name #623 2022-07-19 22:19:58 +09:00
DastInDark
45f49682d5 fixed display relative path processing #623 2022-07-18 22:29:06 +09:00
DastInDark
b97de6b588 revert file path display relative path #623 2022-07-18 21:55:04 +09:00
DastInDark
ea63251a4b cargo fmt 2022-07-18 00:15:10 +09:00
DastInDark
115f8a0632 adjusted relative rule path omit to evtx file column #623 2022-07-18 00:13:47 +09:00
DastInDark
1fba668b23 removed comment 2022-07-17 21:40:27 +09:00
DastInDark
67018ba8c8 changed optimized output when rule option value is relative path #623 2022-07-17 20:25:18 +09:00
kazuminn
bb6717f7cc Feature/improve parallel processing (#622)
* WIP until imple debug trait for dashmap

* change filename print.rs to message.rs

* implement debug for DashMap but member is private. So I cannot Implemented.

* I deleted debug for DashMap

* sorted datetime of dashmap

* delete the unnessesary comment
2022-07-14 12:33:58 +09:00
DastInDark
b10ffa07d8 cargo fmt 2022-06-29 22:18:16 +09:00
DastInDark
8bf5752cc7 mv: full-data option check #606 2022-06-29 22:15:35 +09:00
DastInDark
742465164a Add: default output when no details are defined #606 2022-06-29 20:36:44 +09:00
DustInDark
68276292bc to remove unnecessary newline in display output 2022-06-26 00:21:07 +09:00
DustInDark
5d9782f971 fixed clippy error 2022-06-24 23:06:23 +09:00
DustInDark
4da7b17784 changed hidden rule count output when excluded and noisy and rule parsing error count 0 2022-06-24 23:02:24 +09:00
DustInDark
3053a3579a fixed noisy disable flag and rule parse errors output position 2022-06-24 22:57:59 +09:00
DustInDark
63e3dc2b34 cargo fmt 2022-06-24 22:39:39 +09:00
DustInDark
2a827d34ca changed noisy and excluded rule output and output condition #596 2022-06-24 22:38:24 +09:00
DustInDark
59c88c963f fixed Provide Name suffix #359 2022-06-20 18:21:14 +09:00
DustInDark
4b2c047f95 fixed ProviderName typo #359 2022-06-20 13:55:09 +09:00
DustInDark
7ca66e1d87 fixed referecne proveider name filed #359 2022-06-20 13:46:28 +09:00
DustInDark
4917b988a2 cargo fmt 2022-06-19 22:54:57 +09:00
DustInDark
9ce6580797 add default details #359 2022-06-19 22:53:41 +09:00
DustInDark
5396f785a6 cargo fmt 2022-06-16 21:05:23 +09:00
DustInDark
c043dede83 fixed error 2022-06-16 19:03:34 +09:00
DustInDark
a09768b711 fixed clippy error 2022-06-16 19:00:42 +09:00
DustInDark
3bcdc6208f fixed clippy error 2022-06-16 18:23:16 +09:00
DustInDark
91a781ffa2 changed way of getting arg due to clap derive 2022-06-16 17:40:58 +09:00
DustInDark
d37c6b1866 Merge branch 'main' into 583-enhancement-output-processing-rules-msg-and-rule-status-metrics 2022-06-11 15:29:14 +09:00
DustInDark
c1aecb1096 fixed rate output #583 2022-06-11 04:23:26 +09:00
DustInDark
71d58e6c62 separate load kind rule count and rules status count #583 2022-06-11 03:40:46 +09:00
DustInDark
bfed19b230 erase unnecessary comment 2022-06-11 02:56:50 +09:00
DustInDark
056e63ce5a output status field summary #583 2022-06-11 02:55:20 +09:00
DustInDark
2830ee7b1a changed display-record-id option to hide-record-id #579 2022-06-10 16:49:22 +09:00
DustInDark
af5a85fc0c separate excluded and noisy rules count (#559)
* changed ignored rules display separately  exclude rules and noisy rules.

* fixed tests #556

* cargo fmt

* updated changelog #556

* change order

* sorted output order #556

* cargo fmt

* screenshot update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-06-03 11:56:20 +09:00
DustInDark
2dcf960d51 display default channel name if not defined (#555)
* displayed other channel data in Channel column #553

* updated changelog #553

* updated changelog

* readme and channel abbreviataions update

* changelog update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-06-01 13:01:14 +09:00
DustInDark
4c1aa94eba display logo in green (#552)
* added termcolor reset function #537

* added logo green output #537

* fixed test

* cargo fmt

* updated changelog #537

* fixed clippy error

* update logo screenshot

* updated rules

* changed no colored logo when --no-color option is enabled

* fixed colored reset bug when --update-rules option is enabled

* fixed color reset bug when --level-tuning option is enabled

* cargo fmt

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-31 17:06:12 +09:00
DustInDark
a17d0d4e37 display EventRecordID (#549)
* added -R --display-record-id #548

* fixed test data #548

* cargo fmt

* added describe of -R --display-record-id option to README #548

* updated changelog #548

* readme update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-27 22:19:40 +09:00
DustInDark
684c8a9688 525 show technique tags (#534)
* added --all-tags optiojn #525

- exclude load output_tag.txt when --all-tags option is true

* fixed output to MitreAttack column #525

* added test

* added period

* updated usage in readme

* added test file

* added all-tags option in readme

* readme update

* fixed all-tags option description in help option

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-23 00:19:04 +09:00
DustInDark
d654c2cb6b logon summary (#523)
* logon summary #110

* logon summary #110

* english update

* add sort #110

* add sort #110

* Formatting the output string

* Fixed the check process.

* added document #110

* Fixed login failure eventID.

* Fixed clipy err

* prevent rule load output with logon-summary option #110

* fixed bug of  level-tuning execute when option is -s or -L only #110

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-17 09:36:45 +09:00
DustInDark
2c0b057bc0 added twitter badge and link #519 (#520)
* added twitter badge and link #519

* Fixed clipy err

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
2022-05-15 23:46:32 +09:00
DustInDark
b43eb853e9 Added Channel column and Channel Abbreviations (#508)
* added Channel output #504

* added test #504

* fixed clippy warnings

* fixed convert serde value to Channel #504

* added channel output config #504

* added doc #504

* added Channel column and Channel addreviation

* fixed file name typo

* changed channel position #504

* fixed markdown warnings in CHANGELOG

* readme update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-04-20 16:12:53 +09:00
DustInDark
d4aec68d3b added feature of tag output reducing to agg condition #477 (#488) 2022-04-14 21:32:22 +09:00
hach1yon
7d37e07219 Feature/#216 output allfields csvnewcolumn (#469)
* refactoring

* refactoring

* under constructing

* underconstructing

* under construction

* underconstructing

* fix existing testcase

* finish implement

* fmt

* add option

* change name

* fix control code bug

* fix disp

* change format and fix testcase

* fix help
2022-04-08 20:39:28 +09:00
DustInDark
d6efb5107a reduce output mitre attack detail tachnique No. by config file (#483)
* reduced mitre attck tag output by config file #477

* prepared 1.2.0 version toml

* added test files and mitre attck strategy tag file #477

* fixed cargo.toml version

* updated cargo.lock

* output tag english update

* cargo fmt

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-04-07 00:47:08 +09:00
kazuminn
c8efa95447 Pivot Keyword List機能の追加 (#412)
* add get_pivot_keyword() func

* change function name and call it's function

* [WIP] support config file

* compilete output

* cargo fmt

* [WIP] add test

* add test

* support -o option in pivot

* add pivot mod

* fix miss

* pass test in pivot.rs

* add comment

* pass all test

* add fast return

* fix output

* add test config file

* review

* rebase

* cargo fmt

* test pass

* fix clippy in my commit

* cargo fmt

* little refactor

* change file input logic and config format

* [WIP] change output

* [wip] change deta structure

* change output & change data structure

* pass test

* add config

* cargo fmt & clippy & rebase

* fix cllipy

* delete /rules/ in .gitignore

* clean comment

* clean

* clean

* fix rebase miss

* fix rebase miss

* fix clippy

* file name output on -o to stdout

* add pivot_keywords.txt to ./config

* updated english

* Documentation update

* cargo fmt and clean

* updated translate japanese

* readme update

* readme update

Co-authored-by: DustInDark <nextsasasa@gmail.com>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-04-05 21:17:23 +09:00
DustInDark
7c7a86f7c9 Fixed Clippy Warnings (#451)
* fixed clippy warn

* fixed cargo clippy warnging

* fixed clippy warngings in clippy ver 0.1.59

* fixed clippy warnings clippy::unnecessary_to_owned
2022-03-17 08:43:48 +09:00
DustInDark
bb1f5f619d Fix/fix clippy warn (#434)
- Fixed following Clippy Warnings(previous warning count: 671 -> after: 4)
  - clippy::needless_return
  - clippy::println_empty_string
  - clippy::redundant_field_names
  - clippy::single_char_pattern
  - clippy::len_zero
  - clippy::iter_nth_zero
  - clippy::bool_comparison
  - clippy::question_mark
  - clippy::needless_collect
  - clippy::unnecessary_unwrap
  - clippy::ptr_arg
  - clippy::needless_collect
  - clippy::needless_borrow
  - clippy::new_without_default
  - clippy::assign_op_pattern
  - clippy::bool_assert_comparison
  - clippy::into_iter_on_ref
  - clippy::deref_addrof
  - clippy::while_let_on_iterator
  - clippy::match_like_matches_macro
  - clippy::or_fun_call
  - clippy::useless_conversion
  - clippy::let_and_return
  - clippy::redundant_clone
  - clippy::redundant_closure
  - clippy::cmp_owned
  - clippy::upper_case_acronyms
  - clippy::map_identity
  - clippy::unused_io_amount
  - clippy::assertions_on_constants
  - clippy::op_ref
  - clippy::useless_vec
  - clippy::vec_init_then_push
  - clippy::useless_format
  - clippy::bind_instead_of_map
  - clippy::bool_comparison
  - clippy::clone_on_copy
  - clippy::too_many_arguments
  - clippy::module_inception
  - fixed clippy::needless_lifetimes
  - fixed clippy::borrowed_box (Thanks for helping by hach1yon!)
2022-03-07 08:38:05 +09:00
DustInDark
19c44b4f66 added mitre attack data output in csv output (#397)
* added tags information in csv output #234

* fixed test due to change csvformat struct #234

* changed tag info separator #234

* changed separator #234

* changed tag info separator #234
2022-02-15 02:13:37 +09:00