Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[bug] rule parse error occurs when config/expand folder does not exist #1537

Closed
fukusuket opened this issue Dec 26, 2024 · 0 comments · Fixed by #1538
Closed

[bug] rule parse error occurs when config/expand folder does not exist #1537

fukusuket opened this issue Dec 26, 2024 · 0 comments · Fixed by #1538
Assignees
@fukusuket
Labels
bug Something isn't working
Milestone
3.1 (2025/2/22 Ni...

Comments

@fukusuket
Copy link
Collaborator

Describe the bug
rule parse error occurs when config/expand folder does not exist ... :(

Step to Reproduce
without config/expand and run ./hayabusa csv-timeline -d ./hayabusa-sample-evtx -w

Expected behavior
No rule parse error. (ignore %expand% rule)

Actual behavior

Start time: 2024/12/26 23:59
Total event log files: 598
Total file size: 139.2 MB

Loading detection rules. Please wait.

Excluded rules: 46
Rule parsing errors: 10

Environment:

  • OS: macOS Sequoia 15.1.1
  • hayabusa version 3.0.0

Additional context
N/A
@fukusuket fukusuket added the bug Something isn't working label Dec 26, 2024
@fukusuket fukusuket self-assigned this Dec 26, 2024
@fukusuket fukusuket added this to the 3.1 milestone Dec 26, 2024
@fukusuket fukusuket mentioned this issue Dec 26, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@fukusuket fukusuket

Labels
bug Something isn't working
Projects
None yet
Milestone
3.1 (2025/2/22 Ninja Day)
Development

Successfully merging a pull request may close this issue.

fix: rule parse error when config/expand does not exist Yamato-Security/hayabusa
1 participant
@fukusuket