Releases: WithSecureLabs/chainsaw
Releases · WithSecureLabs/chainsaw
v2.9.1-2
Fixes macos intel build, and adds arm build.
v2.9.1-1
ci: fix macos builds
v2.9.1
This release contains the following changes of note:
- Fixes formatting issues in CLI for aggregate rules
- Allows for multiple files to be dumped with the dump command
v2.9.0
This release contains the following changes of note:
- More native rules
- Ability to change default conditional when searching
- Fix for setting of timezones
v2.8.1
This release contains the following changes of note:
- Fixes and tweaks for SRUM
- Updated dependencies
v2.8.0
This release contains the following changes of note:
- Support for parsing ESE databases and analysing SRUM databases
- New Chainsaw rules
- Full output support for aggregations
v2.7.3
This release contains the following changes of note:
- New Chainsaw rules
- Fixing JSONL outputting issues for
dump
andsearch
- Updated dependencies
v2.7.2
This release contains the following changes of note:
- More optimisations
- Fix some issues with -t arguments
v2.7.1
This release contains the following changes of note:
- Fix mutually exclusive command line options
-c
can only be used with--jsonl
- Error if caching file cannot be created
- Make thread count is respected everywhere
- Better handling of sigma rules (warn on unknown modifiers, and support base64 conversions)
- additional optimisations to jsonl output
v2.7.0
This release contains the following changes of note:
- Add cache to disk support for JSONL output
- Add file path to CSV output
- Fix for newline output issue in tabluar output
- Rule loading warnings should highlight output as a warning
- Tweaks and improvements to mappings and rules