Commit Graph

337 Commits

Author SHA1 Message Date
Tanaka Zakku
ce51728070 v1.3.2 2022-06-13 08:55:01 +09:00
DustInDark
74ba4e45de fixed version number in config #587 2022-06-12 16:03:16 +09:00
DustInDark
d37c6b1866 Merge branch 'main' into 583-enhancement-output-processing-rules-msg-and-rule-status-metrics 2022-06-11 15:29:14 +09:00
DustInDark
c1aecb1096 fixed rate output #583 2022-06-11 04:23:26 +09:00
DustInDark
71d58e6c62 separate load kind rule count and rules status count #583 2022-06-11 03:40:46 +09:00
DustInDark
8e2d1b6244 fixed test 2022-06-11 02:57:23 +09:00
DustInDark
bfed19b230 erase unnecessary comment 2022-06-11 02:56:50 +09:00
DustInDark
056e63ce5a output status field summary #583 2022-06-11 02:55:20 +09:00
DustInDark
2830ee7b1a changed display-record-id option to hide-record-id #579 2022-06-10 16:49:22 +09:00
DustInDark
bcc9133ac7 fixed usage bug 2022-06-10 12:47:20 +09:00
DustInDark
9abff480e9 Merge branch 'main' into 574-add-more-timestamp-format-options 2022-06-10 12:00:35 +09:00
Tanaka Zakku
620fa7b634 fix \ escape 2022-06-09 09:28:05 +09:00
Tanaka Zakku
35f4a92f21 updated readme and usage examples 2022-06-09 09:20:49 +09:00
DustInDark
4f0bd67ca9 changed treat of suffix in data #487 2022-06-09 01:16:27 +09:00
DustInDark
7332a774be cargo fmt 2022-06-09 01:11:20 +09:00
DustInDark
c3587bef9a added test #487 2022-06-09 01:09:57 +09:00
DustInDark
68329a0748 added specified field data from multi data in details #487 2022-06-09 01:08:40 +09:00
DustInDark
781117f206 added three time option #574 2022-06-08 18:50:30 +09:00
DustInDark
4220a9b5e2 replaced unnecessary clone use 2022-06-07 20:55:01 +09:00
DustInDark
9362e81f53 fixed cargo clippy error 2022-06-07 20:39:08 +09:00
DustInDark
f273ffd74d fixed cargo clippy error 2022-06-07 20:00:04 +09:00
DustInDark
ac5ac7fe1a fixed cargo clippy 2022-06-07 19:49:24 +09:00
DustInDark
c3f31c4ac2 fixed cargo fmt 2022-06-07 19:24:23 +09:00
DustInDark
4b623bb631 cargo fmt 2022-06-07 19:05:26 +09:00
DustInDark
a2de1314f9 fixed cargo clippy errors 2022-06-07 19:04:42 +09:00
DustInDark
d00737c033 add view event frequency timeline option (#567)
* added option visual-timeline option #566

* updated readme #566

* updated changelog #566

* updated rules

* cargo fmt

* change --visual-timeline to --visualize-timeline

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-06-05 17:41:08 +09:00
Yamato Security
bdd841f872 V1.3.0 release finalization (#564)
* readme, cargo, usages  update

* readme update
2022-06-04 06:53:40 +09:00
DustInDark
0df42b67ba output saving results message (#563)
* added Results Summary title #561

* added results message when output option is enabled. #561

* version number update

* added newline

* removed newline

* tuned output #561

* fixed bug that console output table header color is same with 1st row color #561

* cargo fmt
2022-06-03 20:49:26 +09:00
DustInDark
af5a85fc0c separate excluded and noisy rules count (#559)
* changed ignored rules display separately  exclude rules and noisy rules.

* fixed tests #556

* cargo fmt

* updated changelog #556

* change order

* sorted output order #556

* cargo fmt

* screenshot update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-06-03 11:56:20 +09:00
DustInDark
2dcf960d51 display default channel name if not defined (#555)
* displayed other channel data in Channel column #553

* updated changelog #553

* updated changelog

* readme and channel abbreviataions update

* changelog update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-06-01 13:01:14 +09:00
DustInDark
4c1aa94eba display logo in green (#552)
* added termcolor reset function #537

* added logo green output #537

* fixed test

* cargo fmt

* updated changelog #537

* fixed clippy error

* update logo screenshot

* updated rules

* changed no colored logo when --no-color option is enabled

* fixed colored reset bug when --update-rules option is enabled

* fixed color reset bug when --level-tuning option is enabled

* cargo fmt

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-31 17:06:12 +09:00
DustInDark
2653e87588 start timeline and end timeline do not work (#547)
* fixed dont work start-timeline and end-timeline #546

* fixed condition

* added changelog #546

* changelog update

* changed stop analysis when start-timeline and end-timeline happend parse error #546

* cargo fmt

* fixed alert message

* fixed lack of timestamp convert

* cargo fmt

* readme/usage update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-28 10:07:39 +09:00
DustInDark
a17d0d4e37 display EventRecordID (#549)
* added -R --display-record-id #548

* fixed test data #548

* cargo fmt

* added describe of -R --display-record-id option to README #548

* updated changelog #548

* readme update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-27 22:19:40 +09:00
DustInDark
dac2a80726 Display total event count and data reduction (#539)
* added reduction percent and all records cnt #538

* version updated v1.3.0-dev

* added events word

* added side margin to sparkline #533

* fixed centering

* change margin from 5 to 3

* readme warning typo fix

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-24 11:13:43 +09:00
DustInDark
995aa1d75b output not found field to n/a (#531)
* changed no found placeholder output to n/a #528

* added n/a output to details when not found placeholder

* added v1.3.0 changelog describe and #528 enhance

* fixed typo and fixed markdown format

* fixed test

* readme, changelog, version update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-23 00:20:08 +09:00
DustInDark
684c8a9688 525 show technique tags (#534)
* added --all-tags optiojn #525

- exclude load output_tag.txt when --all-tags option is true

* fixed output to MitreAttack column #525

* added test

* added period

* updated usage in readme

* added test file

* added all-tags option in readme

* readme update

* fixed all-tags option description in help option

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-23 00:19:04 +09:00
Yamato Security
6414af3609 readme update (#529) 2022-05-20 15:05:34 +09:00
DustInDark
b47561a79c remove color option (#518)
* removed used crate in color option and add term color #481

* removed level_color.txt due to fix output color #481

* removed color definition by file

* update cargo

* removed color definiton by true type vec

* added hex crate

* added level_color.txt and color output to command prompt and powershell #481

* adjust termcolor crate
* restored level_color.txt

* remove c option #481

* fixed document #481

* fixed stdoutput test

* add no-color option #481

- disable color output when no-color option set

* added no-color option document

* Fixed clipy err

* doc, changelog, cargo pkg update

* changelog and rules update

* version up to 1.2.2

* readme and changelog update

* reformat to markdown lint

* adjusted logon summary generator section in japanese readme to english
 readme

* fixed typo in readme

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-17 11:32:57 +09:00
DustInDark
d654c2cb6b logon summary (#523)
* logon summary #110

* logon summary #110

* english update

* add sort #110

* add sort #110

* Formatting the output string

* Fixed the check process.

* added document #110

* Fixed login failure eventID.

* Fixed clipy err

* prevent rule load output with logon-summary option #110

* fixed bug of  level-tuning execute when option is -s or -L only #110

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-05-17 09:36:45 +09:00
DustInDark
9092cc2301 fixed version number #521 (#522)
* fixed version number #521

* Fixed clipy err

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
2022-05-17 09:00:12 +09:00
DustInDark
2c0b057bc0 added twitter badge and link #519 (#520)
* added twitter badge and link #519

* Fixed clipy err

Co-authored-by: garigariganzy <tosada31@hotmail.co.jp>
2022-05-15 23:46:32 +09:00
Yamato Security
fc271c2076 Merge pull request #512 from Yamato-Security/511-move-level_tuning.txt
level_tuning.txtのパスを./rules/configに移動
2022-04-20 20:51:14 +09:00
DustInDark
b43eb853e9 Added Channel column and Channel Abbreviations (#508)
* added Channel output #504

* added test #504

* fixed clippy warnings

* fixed convert serde value to Channel #504

* added channel output config #504

* added doc #504

* added Channel column and Channel addreviation

* fixed file name typo

* changed channel position #504

* fixed markdown warnings in CHANGELOG

* readme update

Co-authored-by: Tanaka Zakku <71482215+YamatoSecurity@users.noreply.github.com>
2022-04-20 16:12:53 +09:00
Tanaka Zakku
c6b2879eb5 change path 2022-04-20 10:16:25 +09:00
DustInDark
d4aec68d3b added feature of tag output reducing to agg condition #477 (#488) 2022-04-14 21:32:22 +09:00
Tanaka Zakku
c09f9d4f5f small english fix 2022-04-12 08:38:57 +09:00
Tanaka Zakku
0db51b1f87 readme, version, cargo update 2022-04-11 18:05:56 +09:00
Yamato Security
861e1c5c4e Merge branch 'develop' into feature/level-tuning#390 2022-04-11 17:24:28 +09:00
DustInDark
265d42df30 Revert "added --level-tuning option to usage"
This reverts commit e6a74090a3.
2022-04-10 16:57:04 +09:00
DustInDark
e6a74090a3 added --level-tuning option to usage 2022-04-10 16:40:37 +09:00