Skip to content

Commit

Permalink
Merge branch '1226-add-mitre-tactics-info-to-html-report' of https://…
Browse files Browse the repository at this point in the history
…github.com/Yamato-Security/hayabusa into 1226-add-mitre-tactics-info-to-html-report
  • Loading branch information
hitenkoku committed Dec 20, 2023
2 parents c1db345 + 09c4848 commit 6eb9d70
Show file tree
Hide file tree
Showing 4 changed files with 15 additions and 4 deletions.
3 changes: 2 additions & 1 deletion CHANGELOG-Japanese.md
Original file line number Diff line number Diff line change
@@ -1,11 +1,12 @@
# 変更点

## 2.12.0 [xxxx/xx/xx]
## 2.12.0 [2023/12/24] "SECCON Christmas Release"

**改善:**

- JSON出力において、MitreTactics、MitreTags, OtherTagsの出力を要素ごとに文字列で出力させるように修正した。 (#1230) (@hitenkoku)
- 検知した端末に対してMITRE ATT&CKの戦術をHTMLレポートに出力できるようにした。この機能を利用するためには利用したプロファイルに`%MitreTactics%`が存在する必要がある。 (#1226) (@hitenkoku)
- `csv-timeline`または`json-timeline`コマンドが利用されたときにissueやpull-requestの連絡先についてのメッセージを追加した。 (#1236) (@hitenkoku)

**バグ修正:**

Expand Down
5 changes: 3 additions & 2 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,11 +1,12 @@
# Changes

## 2.12.0 [xxxx/xx/xx]
## 2.12.0 [2023/12/24] "SECCON Christmas Release"

**Enhancements:**

- `%MitreTactics%`, `%MitreTags%`, `%OtherTags%` fields are now outputted as an array of strings in JSON output. (#1230) (@hitenkoku)
- Added MITRE ATT&CK Tactics list up where detected for each computer to HTML report. This feature needs to exist `%MitreTactics%` in used profile. (#1226) (@hitenkoku)
- Added a summary of MITRE ATT&CK tactics that were detected for each computer in the HTML report. In order to use this feature, you need to use a profile that includes the `%MitreTactics%` field. (#1226) (@hitenkoku)
- Output messages about reporting issues and false positives when using `csv-timeline` or `json-timeline` commands. (#1236) (@hitenkoku)

**Bug Fixes:**

Expand Down
2 changes: 1 addition & 1 deletion config/html_report/hayabusa_report.css

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

9 changes: 9 additions & 0 deletions src/main.rs
Original file line number Diff line number Diff line change
Expand Up @@ -726,6 +726,15 @@ impl App {
"General Overview {#general_overview}",
&stored_static.html_report_flag,
);
match stored_static.config.action {
Some(Action::CsvTimeline(_)) | Some(Action::JsonTimeline(_)) => {
println!();
println!("Please report any issues with Hayabusa rules to: https://github.com/Yamato-Security/hayabusa-rules/issues");
println!("Please report any false positives with Sigma rules to: https://github.com/SigmaHQ/sigma/issues");
println!("Please submit new Sigma rules with pull requests to: https://github.com/SigmaHQ/sigma/pulls");
}
_ => {}
}

// Qオプションを付けた場合もしくはパースのエラーがない場合はerrorのstackが0となるのでエラーログファイル自体が生成されない。
if ERROR_LOG_STACK.lock().unwrap().len() > 0 {
Expand Down

0 comments on commit 6eb9d70

Please sign in to comment.