root
|
bc52994922
|
fix coredump when rule is invalid
|
2024-10-29 07:51:04 +00:00 |
|
root
|
9d72c83e9f
|
store history pattern ids at expr_matcher after hs/rs stream scan, instead of storing them during hs/rs scan
|
2024-10-28 10:44:22 +00:00 |
|
root
|
abd00a9aab
|
add some detail info for log
|
2024-10-28 09:25:46 +00:00 |
|
root
|
816dabaf9e
|
change library version according to tag version
|
2024-10-25 07:58:28 +00:00 |
|
root
|
b663077045
|
remove useless test case
|
2024-10-25 03:31:55 +00:00 |
|
root
|
da715f21ef
|
rename o2o and object2object to object_group
|
2024-10-24 07:56:49 +00:00 |
|
root
|
1cd21a43c9
|
fix MaatCmd testcase
|
2024-10-24 07:12:57 +00:00 |
|
root
|
041c32ccaa
|
ipport plugin table support CIDR
|
2024-10-17 06:37:29 +00:00 |
|
root
|
cc67447c4e
|
fix foreign key rewrite fail
|
2024-10-16 01:48:31 +00:00 |
|
root
|
78f733417c
|
fix memory leak
|
2024-10-14 02:25:36 +00:00 |
|
root
|
586f1c11b2
|
1.support and_conditions and or_conditions in rule
2.all test case success except MaatCmd.* in maat_framework_gtest
|
2024-10-12 07:28:26 +00:00 |
|
root
|
02a2acf051
|
fix some test case
|
2024-10-11 06:37:06 +00:00 |
|
root
|
e180ce18e0
|
fix test case using rule from json file
|
2024-10-10 06:28:40 +00:00 |
|
root
|
35667246d3
|
use attribute_name instead of attribute_id to map condition_id
|
2024-10-08 11:10:03 +00:00 |
|
root
|
3bbbd53f39
|
fix maat_redis_tool, fix some mem leaks, use (uuid_t *) type as para of function to avoid some problems
|
2024-09-27 11:38:41 +00:00 |
|
root
|
3315428974
|
add temp code
|
2024-09-26 11:14:06 +00:00 |
|
root
|
fc99675b40
|
change type of rule_id, object_id, item_id from (long long) to (uuid_t)
just compile libmaatframe.so, without modifing about test case
|
2024-09-20 11:20:21 +00:00 |
|
root
|
20de47c873
|
run first test case success
|
2024-09-14 11:29:12 +00:00 |
|
root
|
feb1576545
|
add basic code without test case, just compile success
|
2024-09-12 09:31:27 +00:00 |
|
root
|
537c75887d
|
1.rename rule_state to rule_compile_state
2.recover regex_expr.json to make expr_matcher_gtest pass
|
2024-08-30 08:28:58 +00:00 |
|
root
|
54a70f19d9
|
rename terminology "group" to "object"
|
2024-08-22 10:26:59 +00:00 |
|
root
|
72cf89723d
|
rename terminology "not flag" to "negate option"
|
2024-08-22 08:28:33 +00:00 |
|
root
|
e538f5bb52
|
rename terminology "clause" to "condition"
|
2024-08-22 07:35:53 +00:00 |
|
root
|
f660e6b2ac
|
rename terminology "virtual table(vtable)" to "attribute"
|
2024-08-22 06:42:37 +00:00 |
|
root
|
678ddd718a
|
rename terminology "compile" to "rule"
|
2024-08-22 03:11:15 +00:00 |
|
root
|
a4ca92ea41
|
rename maat_rule.c to maat_core.c
rename maat_rule.h to maat_core.h
|
2024-08-21 08:39:28 +00:00 |
|
root
|
0640799f21
|
remove unescape process of district
|
2024-08-21 07:50:09 +00:00 |
|
root
|
b634070092
|
remove escape of \b
|
2024-08-21 02:20:04 +00:00 |
|
root
|
d16a5d3b92
|
modify expr table and fix corresponding test case
|
2024-08-19 11:04:17 +00:00 |
|
root
|
7dd54ad0ec
|
modify fqdn_plugin table
|
2024-08-13 07:29:41 +00:00 |
|
root
|
a6c3e26577
|
modify interval table and fix some test case
|
2024-08-13 03:35:50 +00:00 |
|
root
|
a786103b94
|
modify ip_table and ip_plugin_table
|
2024-08-09 01:52:13 +00:00 |
|
root
|
906b8c92aa
|
use fieldstat4_easy auto output instead of manually write file
|
2024-08-08 08:25:51 +00:00 |
|
root
|
d114221ebe
|
TSG-22082: support set split log file by size
|
2024-08-07 08:47:15 +00:00 |
|
liuchang
|
2fd93a1648
|
fix mem leak
|
2024-07-16 08:03:19 +00:00 |
|
liuchang
|
e604a066ab
|
add modified_time column for compile table while loading json file
|
2024-07-12 01:52:32 +00:00 |
|
Zheng Chao
|
2d77b9c88d
|
When removing group from a clause, and the clause is empty, the clause id should be cleared.
|
2024-07-01 14:48:29 +08:00 |
|
liuchang
|
5d30c1009c
|
change invoke strtok() to strtok_r()
|
2024-05-23 06:50:10 +00:00 |
|
root
|
3b5009ce9e
|
TSG-21089: 不修改runtime的引擎配置，保证增量更新时的引擎切换判断正确
|
2024-05-08 03:43:55 +00:00 |
|
liuchang
|
d8d7f38efc
|
add dup key don't output fatal log
|
2024-04-24 08:16:57 +00:00 |
|
liuchang
|
56238be701
|
TSG-20076: 存储转义之前的字符串，避免增量更新时对已转义的规则再次转义
|
2024-04-23 10:15:33 +00:00 |
|
root
|
5c93f40900
|
TSG-20724: use maat instance name as maat stat name
|
2024-04-23 03:34:22 +00:00 |
|
liuwentan
|
580d6faa0f
|
[BUGFIX]Clean up hit groups promptly during scanning
|
2024-04-11 16:16:04 +08:00 |
|
liuwentan
|
1b97f76bf5
|
[BUGFIX]maat_scan_group support virtual table statistics
|
2024-04-09 09:57:11 +08:00 |
|
liuwentan
|
7e25f48fdd
|
[PATCH]delete useless code
|
2024-04-03 16:47:30 +08:00 |
|
liuwentan
|
cbabcbd6b0
|
[PATCH]support virtual table statistics
|
2024-04-02 16:17:31 +08:00 |
|
liuwentan
|
3e1acddf61
|
[BUGFIX]fix maat_stat output invalid table_name
|
2024-03-28 14:17:22 +08:00 |
|
郑超
|
99f98abbcd
|
Feature/scan ip port together support endpoint object
|
2024-03-27 11:19:39 +00:00 |
|
liuwentan
|
d2422fe7e1
|
[FEATURE]fieldstat3 -> fieldstat4
|
2024-03-15 18:17:36 +08:00 |
|
liuwentan
|
b1c629811d
|
[FEATURE]ip_plugin support CIDR addr_format
|
2024-03-15 14:50:50 +08:00 |
|