Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New feature: -P, --proven-rules #1115

Closed
YamatoSecurity opened this issue Jul 1, 2023 · 1 comment · Fixed by #1120
Closed

New feature: -P, --proven-rules #1115

YamatoSecurity opened this issue Jul 1, 2023 · 1 comment · Fixed by #1120
Assignees
@hitenkoku
Labels
enhancement New feature or request
Milestone
v2.7.0

Comments

@YamatoSecurity
Copy link
Collaborator

For csv-timeline, json-timeline and pivot-keywords-list, add a -P, --proven-rules option to Filtering to only load rules with IDs listed in ./rules/config/proven_rules.txt. This will be an updated list of rules that are proven to work. It has 936 rules at the moment so will increase scan time by 3x at the moment.
@YamatoSecurity YamatoSecurity added the enhancement New feature or request label Jul 1, 2023
@YamatoSecurity YamatoSecurity added this to the v2.7.0 milestone Jul 1, 2023
@hitenkoku hitenkoku self-assigned this Jul 2, 2023
@hitenkoku
Copy link
Collaborator

Since pivot-keywords-list does not use rules, it is implemented only for csv-timeline and json-timeline.

hitenkoku added a commit that referenced this issue Jul 3, 2023
@hitenkoku
feat: added proven-rules option in csv-timeline and json-timeline #1115
a762b63
hitenkoku added a commit that referenced this issue Jul 3, 2023
@hitenkoku
test: adjusted test to add -P --proven-rules option #1115
fe9ded7
hitenkoku added a commit that referenced this issue Jul 3, 2023
@hitenkoku
docs(CHANGELOG): added #1115
c0aaf98
@hitenkoku hitenkoku linked a pull request Jul 3, 2023 that will close this issue
added new feature -P, --proven-rules #1120
Merged
hitenkoku added a commit that referenced this issue Jul 3, 2023
@hitenkoku
fix: fixed proven-rule excluded condition #1115
e3d412d
hitenkoku added a commit that referenced this issue Jul 4, 2023
@hitenkoku
fix(yaml): fixed proven-rules option filtering condition wrong in if …
ea444a8 
…statement #1115
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@hitenkoku hitenkoku

Labels
enhancement New feature or request
Projects
None yet
Milestone
v2.7.0
Development

Successfully merging a pull request may close this issue.

added new feature -P, --proven-rules Yamato-Security/hayabusa
2 participants
@hitenkoku @YamatoSecurity