New command: stack-dns

[YamatoSecurity]

stack-dns: stack DNS queries and responses

Similar to stack-processes, it will stack similar with an option to output to CSV.

cat ../hayabusa/sample.jsonl | jq 'select(.EventID==22) | .Details.Proc, " -> ", .Details.Query, " -> ", .Details.Result, "\n"' -j -r | sort | uniq -c | sort -nr
   2 C:\Windows\System32\svchost.exe -> wpad -> -
   2 C:\TOOLS\PsExec64.exe -> fs03vuln -> 10.23.42.38;

Right now, we only support Sysmon logs but in the future I want to support built in Windows logs as well.