Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New features: Filtering on Computer name(s) #1117

Closed
YamatoSecurity opened this issue Jul 3, 2023 · 0 comments · Fixed by #1124
Closed

New features: Filtering on Computer name(s) #1117

YamatoSecurity opened this issue Jul 3, 2023 · 0 comments · Fixed by #1124
Assignees
@hitenkoku
Labels
enhancement New feature or request
Milestone
v2.7.0

Comments

@YamatoSecurity
Copy link
Collaborator

YamatoSecurity commented Jul 3, 2023 •
edited

In the Filtering section of csv-timeline, json-timeline, pivot-keywords-list, logon-summary, metrics commands, add the following:
--include-computer <COMPUTER> Scan only these computer names (ex: ComputerA) (ex: ComputerA,ComputerB)

--exclude-computer <COMPUTER> Ignore these computer names (ex: ComputerA) (ex: ComputerA,ComputerB)

These filters will be useful when only wanting to analyze certain computers or exclude certain computers.
@YamatoSecurity YamatoSecurity added the enhancement New feature or request label Jul 3, 2023
@YamatoSecurity YamatoSecurity added this to the v2.7.0 milestone Jul 3, 2023
@hitenkoku hitenkoku self-assigned this Jul 3, 2023
hitenkoku added a commit that referenced this issue Jul 7, 2023
@hitenkoku
feat(configs): added include_computer and exclude_computer options #1117
70c17c7 


option is enabled in following command.

- csv-timeline
- json-timeline
- metrics
- logon-summary
- pivot-keywords-list
hitenkoku added a commit that referenced this issue Jul 7, 2023
@hitenkoku
feat(configs): added include_computer and exclude_computer in StoredS…
5e641d2 
…tatic field #1117
hitenkoku added a commit that referenced this issue Jul 7, 2023
@hitenkoku
feat(detecion/utils): added include and exclude by computername in cs…
17b00f9 
…v-timeline, json-timeline #1117
hitenkoku added a commit that referenced this issue Jul 7, 2023
@hitenkoku
feat(metrics/timelines):added include and exclude by computer name in…
4294159 
… metrics and logon-summary #1117:

feat(metrics/timelines): added include and exclude by computer name in metrics and logon-summary #1117
hitenkoku added a commit that referenced this issue Jul 7, 2023
@hitenkoku
feat(detection/pivot): added include and exclude by computer name in …
0c3068b 
…pivot-keywords-list #1117
hitenkoku added a commit that referenced this issue Jul 7, 2023
@hitenkoku
test: adjusted to add include-computer and exclude-computer option #1117
215bb14
hitenkoku added a commit that referenced this issue Jul 8, 2023
@hitenkoku
fix(configs): fixed exclude-computer option wrong initialize #1117
3e04598
@hitenkoku hitenkoku linked a pull request Jul 8, 2023 that will close this issue
added new features filtering on computer names #1124
Merged
hitenkoku added a commit that referenced this issue Jul 8, 2023
@hitenkoku
docs(CHANGELOG): added #1117
806c400
hitenkoku added a commit that referenced this issue Jul 8, 2023
@hitenkoku
test(utils): added test for filtering by computer name #1117
a57165e
hitenkoku added a commit that referenced this issue Jul 9, 2023
@hitenkoku
feat(main/detection/pivot/metrics/timelines): modified filtering by c…
24516b2 
…omputer name before detection #1117
hitenkoku added a commit that referenced this issue Jul 9, 2023
@hitenkoku
feat(main): added filtered by computer name to json format event log #…
eb23dbf 
…1117
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@hitenkoku hitenkoku

Labels
enhancement New feature or request
Projects
None yet
Milestone
v2.7.0
Development

Successfully merging a pull request may close this issue.

added new features filtering on computer names Yamato-Security/hayabusa
2 participants
@hitenkoku @YamatoSecurity