Been trying to use the hunt feature and have the output in the local timezone (which i

Hey, Firstly it seems that chrono_tz</code

'--timezone' and '--local' option not working as intended about chainsaw HOT 2 CLOSED

mohdaadilf commented on June 6, 2024

'--timezone' and '--local' option not working as intended

from chainsaw.

Comments (2)

alexkornitzer commented on June 6, 2024

Hey,

Firstly it seems that chrono_tz does not implement IST, hence why that one is not being allowed through the command line (chronotope/chrono-tz#44). So unless we add support to use fixed offsets so +0530 could be handled then a matching timezone like Asia/Colombo would have to be used.

So this output issue is on me cause we never truly validated the timezone code:

chainsaw/src/hunt.rs

Lines 1043 to 1044 in e47f9ce

    
           // TODO: Not sure if this is correct... 
        
           let localised = if let Some(timezone) = self.inner.timezone {

I'll assign this to me and get is fixed ASAP.

from chainsaw.

alexkornitzer commented on June 6, 2024

Right, I think timezone support is now implemented correctly. That should be out soon in the next release.

from chainsaw.

Related Issues (20)

Deserialization error does't not show responsible file HOT 2
Invalid Tau Key Pair error HOT 2
Hunt with WEC/WEF HOT 2
keyless identifiers cannot be converted HOT 3
Check for potential I/0 error before processing HOT 1
Erroneous Sigma Results using Hunt option HOT 7
chainsaw project name collides with another rust project HOT 2
Tau EventID Filter error HOT 6
v2.4+ seems to be unable to recognize Sigma alerts HOT 1
Sophos Antivirus Rule Not Parsing Data Events With Same Key Name HOT 5
Print warning when loading Sigma rules with keyless search identifiers HOT 6
Missing Sigma Base64 Encoding? HOT 3
-o flag not recognized HOT 2
No executable HOT 1
Looking for clarity for mft yaml 'filter' issue HOT 3
[Feature Request] Support for "contains", "|" and "all" in both chainsaw and sigma rules HOT 4
Search feature doesn't parse backslashes HOT 2
Feature Request: Event Log ID / Sigma Summary HOT 1
Microsoft Defender / Antivirus detections removed in new releases HOT 7

'--timezone' and '--local' option not working as intended about chainsaw HOT 2 CLOSED

Comments (2)

Related Issues (20)

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent

	// TODO: Not sure if this is correct...
	let localised = if let Some(timezone) = self.inner.timezone {