WithSecureLabs/chainsaw

Issues

• [Bug] MFT DataStreams Field Appears Cut Off for SmartScreen

  #211 opened 2 months ago by reece394
  1

• Feature Request: MFT Resident Files

  #190 opened 2 months ago by IppSec
  3

• MFT Alternate Data Streams

  #191 opened 2 months ago by IppSec
  3

• An error occurred while trying to deserialize evtx stream

  #208 opened 3 months ago by AhmetPayaslioglu
  3

• [Request] Add Verbose Dev-Logging

  #198 opened 3 months ago by import-pandas-as-numpy
  5

• [Bug] Chainsaw not added to devShell environment

  #199 opened 3 months ago by unrooted
  1

• [Bug] Chainsaw Accidentally Attempts to Parse Non-MFT Files when Signature Matches

  #201 opened 3 months ago by reece394
  1

• did 2.10.1 release get re-tagged

  #197 opened 3 months ago by chenrui333
  2

• Feature Request: Add $MFT Filename Support

  #192 opened 4 months ago by reece394
  6

• XML2EVTX fails

  #189 opened 4 months ago by ashokchokalingam
  8

• Can this be run across network?

  #188 opened 4 months ago by PowerPress
  1

• why there is no LINUX/ARM64 Version of it...?

  #186 opened 4 months ago by EeqMC2s
  0

• Feature Request: Ability to Filter the Output View

  #187 opened 4 months ago by IppSec
  3

• Improve handling of registry hives

  #185 opened 5 months ago by JakePeralta7
  5

• Feature Request: Add Parsing Capabilities for Registry Hives and Rules Capabilities

  #184 opened 5 months ago by JakePeralta7
  0

• [BUG] Multiple rule matches shift CSV column values

  #180 opened 6 months ago by import-pandas-as-numpy
  3

• Implement a K/V container

  #178 opened 7 months ago by alexkornitzer
  1

• Shim Cache Analysis Errors - input is out of range

  #176 opened 7 months ago by pdutton-vc
  2

• Support for Mac artefact filetypes

  #175 opened 7 months ago by owentl
  2

• Windows 11 Shim Cache Analysys Errors

  #173 opened 8 months ago by pdutton-vc
  2

• v2.9.1 mac X86 64 binary is actual an ARM64, not x86

  #172 opened 8 months ago by rsulliva
  3

• Tau for multiple variables?

  #170 opened 9 months ago by Sil3ntgh0st
  6

• BUG: Aggregate String Fields Not Coalescing

  #171 opened 9 months ago by import-pandas-as-numpy
  1

• Microsoft Defender / Antivirus detections removed in new releases

  #168 opened 10 months ago by AnthoLaMalice
  7

• '--timezone' and '--local' option not working as intended

  #164 opened a year ago by mohdaadilf
  2

• Feature Request: Event Log ID / Sigma Summary

  #160 opened a year ago by ssnkhan
  1

• Search feature doesn't parse backslashes

  #152 opened a year ago by b0s0z0ku
  2

• [Feature Request] Support for "contains", "|" and "all" in both chainsaw and sigma rules

  #149 opened a year ago by reece394
  4

• Looking for clarity for mft yaml 'filter' issue

  #148 opened a year ago by gr3y56
  3

• No executable

  #144 opened a year ago by TomHilk-learning
  1

• Count column

  #103 opened 2 years ago by mkwired
  9

• -o flag not recognized

  #141 opened 2 years ago by maikroservice
  2

• Chainsaw uses a lot of RAM when processing large individual files with a large number of detections

  #102 opened 2 years ago by KRUXLEX
  29

• Missing Sigma Base64 Encoding?

  #138 opened 2 years ago by L015H4CK
  3

• Erroneous Sigma Results using Hunt option

  #122 opened 2 years ago by OMENScan
  7

• Print warning when loading Sigma rules with keyless search identifiers

  #135 opened 2 years ago by ru37z
  6

• chainsaw project name collides with another rust project

  #125 opened 2 years ago by xambroz
  2

• Sophos Antivirus Rule Not Parsing Data Events With Same Key Name

  #132 opened 2 years ago by reece394
  5

• v2.4+ seems to be unable to recognize Sigma alerts

  #131 opened 2 years ago by Maspital
  1

• Tau EventID Filter error

  #128 opened 2 years ago by Richard1611
  6

• Check for potential I/0 error before processing

  #121 opened 2 years ago by jfstenuit
  1

• keyless identifiers cannot be converted

  #120 opened 2 years ago by nbareil
  3

• Hunt with WEC/WEF

  #115 opened 2 years ago by Flexxi51
  2

• Invalid Tau Key Pair error

  #114 opened 2 years ago by clareesespieces
  2

• Deserialization error does't not show responsible file

  #109 opened 2 years ago by m-terlinde
  2

• Add timestamp format to help output

  #108 opened 2 years ago by m-terlinde
  2

• Definition of "logsource" values like product or category.

  #107 opened 2 years ago by Maspital
  12

• Incorrect hunt examples displayed

  #104 opened 2 years ago by Cleako
  1

• chrono-tz phf dependency

  #100 opened 2 years ago by chronocrate
  6

• Issue with linux bash execution by multi directories

  #101 opened 2 years ago by KRUXLEX
  0