Tanaka Zakku
f0722e38b7
English readme updates
2021-12-11 11:30:37 +09:00
Tanaka Zakku
1f80a3b263
Merge branch 'main' of https://github.com/Yamato-Security/hayabusa into main
2021-12-11 08:37:22 +09:00
Tanaka Zakku
9d8d6cba9d
hayabusa.py timeflame -> timeframe
2021-12-11 08:37:17 +09:00
kazuminn
5ae170bcc0
refactor : rename variables and fix typo and add test ( #270 )
...
* rename variables and fix typo and add test
* fix typo
2021-12-11 04:25:35 +09:00
James Takai / hach1yon
d3574134f7
fix max record number ( #279 )
2021-12-11 01:45:47 +09:00
Tanaka Zakku
794b8f2431
English readme update
2021-12-11 01:13:25 +09:00
Tanaka Zakku
f7006a83f3
Merge branch 'main' of https://github.com/Yamato-Security/hayabusa into main
2021-12-11 00:54:47 +09:00
Tanaka Zakku
8ab54883de
English readme update
2021-12-11 00:54:39 +09:00
DustInDark
2ff94b6e2c
added win_rare_schtask_creation to noisy-rule #263 ( #277 )
2021-12-11 00:26:50 +09:00
kazuminn
a00a114101
refactor : rename variables and fix typo and add test ( #270 )
2021-12-10 23:01:47 +09:00
Yamato Security
9941a5dc90
Update sigmac tool readme and ruletype name ( #267 )
2021-12-09 09:28:54 +09:00
Yamato Security
5da9dc748f
Merge pull request #248 from Yamato-Security/feature/fill_no_use_rules
...
feature : exclude rules by their ID in case of duplicates, etc...
2021-12-09 06:41:15 +09:00
kazuminn
a2495b6b50
fix miss
2021-12-09 01:35:53 +09:00
kazuminn
db3616b56d
add test rule files
2021-12-09 01:29:23 +09:00
kazuminn
360d80b578
clear
2021-12-09 01:15:01 +09:00
kazuminn
3f11e426ba
add test rule file
2021-12-09 01:06:50 +09:00
kazuminn
b9831ca38a
add test for exclude rules
2021-12-09 00:57:40 +09:00
kazuminn
c8473b7668
remove comment
2021-12-08 23:16:46 +09:00
DustInDark
493c5ddec1
Trivia/eastereggs#212 ( #266 )
...
* add ninja arts #212
* add takoyakiday eggs #212
* add christmas eggs #212
* add happy newyear eggs #212
* changed encode from UTF-8 BOM to UTF-8
* add output easteregg #212
- changed analysis datetime from Utc to Local
- added output easteregg #213
* changed happynewyear arts #212
* fix ninja day #212
* fix christmas #212
2021-12-07 01:52:27 +09:00
itiB
f8bd738984
fix: input time format
2021-12-07 01:25:21 +09:00
itiB
0e4136e9cf
fix: option's documents
2021-12-07 01:00:18 +09:00
itiB
a1ec06cc6c
rm: comments
2021-12-07 00:52:57 +09:00
itiB
4bb445d4f5
Add: time filter
2021-12-07 00:50:00 +09:00
itiB
e09cfb7231
Add: datetime util
2021-12-07 00:11:34 +09:00
itiB
cc7697a319
Merge branch 'main' into feature/start_finish_time
2021-12-06 23:07:08 +09:00
DustInDark
50daf1d716
Feature/improve rule file read time#254 ( #260 )
...
* fixed cached aggregation parser regex #254
* fixed cached condition parser regex #254
* fixed cached condition parser regex re_pipe #254
2021-12-05 15:05:09 +09:00
James Takai / hach1yon
b10b714b36
SIGMAルールの変換ツールのテストケース作成とバグFIX ( #261 )
...
* grep検索に数値を指定されていると、sigmaルールの変換に失敗する問題を修正しました。
* add test files and bugfix for no timeframe.
2021-12-05 15:02:54 +09:00
James Takai / hach1yon
2222211ccd
Merge branch 'main' into feature/fill_no_use_rules
2021-12-04 19:31:35 +09:00
ichiichi11
191d1df9f0
add exclude files and fix bugs.
2021-12-04 19:23:50 +09:00
ichiichi11
9169214553
fix bug.
2021-12-04 19:09:41 +09:00
ichiichi11
c961c3768c
change from hashmap to hashset and remove unnecessary copy.
2021-12-04 18:46:11 +09:00
DustInDark
ac5c5c2917
Bugfix/yml alias not found all data output#227 ( #241 )
...
* removed no use alias #227
* changed case of object type return none #227
- serde json value is object type when alias key dont exist in detected record.
* adjust serde_number_to_string function return value change #227
* adjust yml rule to change of aliaskey_alias.txt #227
* merged same regex as static
* create new struct to reduce same output in rule and keyword warn message #227
* changed output position
* removed regression warnings #227
* removed output wanring
* Fixed a possible panic when None. #227
* added parse_message test #227
* added get_serde_number_to_string tests #227
* removed unnecessary test data part in get_serde_numuber_to_string test #227
2021-12-04 11:49:38 +09:00
DustInDark
d112129771
changed stdout result delimiter #244 ( #245 )
...
* changed stdout result delimiter #244
* removed unnecessary space #244
* added display output test #244
- added static map clear function (only test use)
- added outputformat test case of stdout (change sequencial process in emit_csv test To prevent the contents of static variables from changing depending on the order of execution)
* fixed typo
2021-12-04 11:20:11 +09:00
Yamato Security
e0936ab2d1
rule update ( #249 )
2021-12-03 15:52:43 +09:00
DustInDark
8b9dac961a
added progress bar #199 ( #247 )
2021-12-03 10:12:31 +09:00
kazuminn
446e540d6f
merge main into feature/fill_no_use_rules
2021-12-02 00:49:54 +09:00
kazuminn
b9c415eab5
add
2021-12-02 00:43:31 +09:00
kazuminn
838a935d34
pass test
2021-12-02 00:33:19 +09:00
kazuminn
341a5e4f86
feature fillter no use rules
2021-11-30 22:54:36 +09:00
James Takai / hach1yon
2febaa9b73
add target event filtering. ( #242 )
2021-11-28 19:02:27 +09:00
DustInDark
84f17323da
Hotfix/load rule level changed info to informational#237#238 ( #240 )
...
* changed INFO to informational #237
- INFO in rule level is changed to informational
* changed level load default rule from LOW to INFORMATIONAL #238
* fixed level description in doc and help menu #238
* removed test files
* removed test check file
2021-11-28 18:27:58 +09:00
DustInDark
0cfa806baf
Feature/addruletype to sigma rule#230 ( #235 )
...
* added ruletype to SIGMA rule #230
* added ruletype to SIGMA rule converter tool #231
2021-11-28 18:14:51 +09:00
Yamato Security
bc230f7cd5
英語修正 ( #236 )
...
* 英語修正
* cargo fmt
* fixed test assertion string data
Co-authored-by: DustInDark <nextsasasa@gmail.com >
2021-11-27 11:21:55 +09:00
DustInDark
cc7767a960
changed output format header #213 ( #228 )
...
* changed output format header #213
* fixed test parameter #213
2021-11-27 00:33:19 +09:00
Yamato Security
df0279c4d1
rule updates-2021-11-26 ( #233 )
...
* rule updates-2021-11-26
* adjust trivial change in pull request issue coment
Co-authored-by: DustInDark <nextsasasa@gmail.com >
2021-11-26 15:34:16 +09:00
DustInDark
b48f774b93
Feature/output unique detection#209 ( #225 )
...
* checked contributors #141
- because RustyBlue code contributor(not hayabusa contributor) was mixed in hayabusa contributor
* changed yaml count name
* changed ruletype string #157
* fixed output of parse error #157
* fixed output
* added level unique detection output #209
2021-11-24 21:15:43 +09:00
itiB
b2692ef983
Add: input function for start/end option
2021-11-24 00:09:41 +09:00
Yamato Security
015899bc51
ルール更新 ( #224 )
2021-11-23 15:04:03 +09:00
itiB
034f9c0957
Add: sigma rules ( #175 )
2021-11-22 08:45:44 +09:00
DustInDark
b53342218c
Feature/output logo#206 ( #222 )
...
* add output logo #206
* added newline and orgnization name #206
* add output rule count #200
* Changed yml summarize the totals for each folder hierarchy. #157
* added analyzing evtx file count output #157
* added loaded rule count output #157
* added quiet option #206
2021-11-21 15:16:44 +09:00
