Integration Test #475
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Integration Test | |
| on: | |
| workflow_dispatch: | |
| env: | |
| CARGO_INCREMENTAL: 0 | |
| RUSTFLAGS: "-D warnings" | |
| jobs: | |
| integration-test: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| os: ['ubuntu-22.04', 'windows-2019'] | |
| steps: | |
| - name: Checkout main | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| path: main | |
| - name: Checkout hayabusa-sample-evtx repo | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: Yamato-Security/hayabusa-sample-evtx | |
| path: hayabusa-sample-evtx | |
| - name: Set up Rust toolchain | |
| if: ${{ steps.skip_check.outputs.should_skip != 'true' }} | |
| uses: dtolnay/rust-toolchain@stable | |
| - name: help | |
| run: cd main && cargo run --release -- help | |
| - name: update-rules | |
| run: cd main && cargo run --release -- update-rules -q | |
| - name: computer-metrics | |
| run: cd main && cargo run --release -- computer-metrics -d ../hayabusa-sample-evtx -q | |
| - name: computer-metrics(-o) | |
| run: cd main && cargo run --release -- computer-metrics -d ../hayabusa-sample-evtx -q -o out.csv -C | |
| - name: csv-timeline | |
| run: cd main && cargo run --release -- csv-timeline -d ../hayabusa-sample-evtx -o out.csv -q -w -D -n -u -C | |
| - name: csv-timeline(-p super-verbose) | |
| run: cd main && cargo run --release -- csv-timeline -d ../hayabusa-sample-evtx -o out-s.csv -p super-verbose -q -w -D -n -u | |
| - name: eid-metrics | |
| run: cd main && cargo run --release -- eid-metrics -d ../hayabusa-sample-evtx -q | |
| - name: eid-metrics(-o) | |
| run: cd main && cargo run --release -- eid-metrics -d ../hayabusa-sample-evtx -q -o out.csv -C | |
| - name: expand-list | |
| run: cd main && cargo run --release -- expand-list -q | |
| - name: extract-base64 | |
| run: cd main && cargo run --release -- extract-base64 -d ../hayabusa-sample-evtx -q | |
| - name: extract-base64(-o) | |
| run: cd main && cargo run --release -- extract-base64 -d ../hayabusa-sample-evtx -q -o out.csv -C | |
| - name: json-timeline | |
| run: cd main && cargo run --release -- json-timeline -d ../hayabusa-sample-evtx -o out.json -q -w -D -n -u | |
| - name: json-timeline(-p super-verbose) | |
| run: cd main && cargo run --release -- json-timeline -d ../hayabusa-sample-evtx -o out-s.json -p super-verbose -q -w -D -n -u | |
| - name: json-timeline(-L) | |
| run: cd main && cargo run --release -- json-timeline -d ../hayabusa-sample-evtx -o out.jsonl -q -L -w -D -n -u | |
| - name: level-tuning | |
| run: cd main && cargo run --release -- level-tuning -f ./rules/config/level_tuning.txt -q | |
| - name: list-contributors | |
| run: cd main && cargo run --release -- list-contributors -q | |
| - name: list-profiles | |
| run: cd main && cargo run --release -- list-profiles -q | |
| - name: log-metrics | |
| run: cd main && cargo run --release -- log-metrics -d ../hayabusa-sample-evtx -q | |
| - name: log-metrics(-o) | |
| run: cd main && cargo run --release -- log-metrics -d ../hayabusa-sample-evtx -q -o out.csv -C | |
| - name: logon-summary | |
| run: cd main && cargo run --release -- logon-summary -d ../hayabusa-sample-evtx -q | |
| - name: logon-summary(-o) | |
| run: cd main && cargo run --release -- logon-summary -d ../hayabusa-sample-evtx -q -o out.csv -C | |
| - name: pivot-keywords-list | |
| run: cd main && cargo run --release -- pivot-keywords-list -d ../hayabusa-sample-evtx -o key -q -w | |
| - name: search | |
| run: cd main && cargo run --release -- search -d ../hayabusa-sample-evtx -k mimikatz -q | |
| - name: search(-o) | |
| run: cd main && cargo run --release -- search -d ../hayabusa-sample-evtx -k mimikatz -o search.csv -q | |
| - name: set-default-profile | |
| run: cd main && cargo run --release -- set-default-profile -p verbose -q | |
| integration-test-encoded-rules: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| os: ['ubuntu-24.04', 'windows-2022'] | |
| steps: | |
| - name: Checkout main | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| path: main | |
| - name: Checkout hayabusa-sample-evtx repo | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: Yamato-Security/hayabusa-sample-evtx | |
| path: hayabusa-sample-evtx | |
| - name: Set up Rust toolchain | |
| if: ${{ steps.skip_check.outputs.should_skip != 'true' }} | |
| uses: dtolnay/rust-toolchain@stable | |
| - name: Download encoded rules and config files (Windows) | |
| if: contains(matrix.os, 'windows') == true | |
| shell: pwsh | |
| run: | | |
| cd main | |
| cargo build --release | |
| Copy-Item -Path target\release\hayabusa.exe -Destination .\hayabusa.exe | |
| Remove-Item -Path ./config -Recurse -Force | |
| Remove-Item -Path ./rules -Recurse -Force | |
| Invoke-WebRequest -Uri https://raw.githubusercontent.com/Yamato-Security/hayabusa-encoded-rules/refs/heads/main/encoded_rules.yml -OutFile encoded_rules.yml | |
| Invoke-WebRequest -Uri https://raw.githubusercontent.com/Yamato-Security/hayabusa-encoded-rules/refs/heads/main/rules_config_files.txt -OutFile rules_config_files.txt | |
| - name: Download encoded rules and config files (Ubuntu) | |
| if: contains(matrix.os, 'ubuntu') == true | |
| run: | | |
| cd main | |
| cargo build --release | |
| cp target/release/hayabusa . | |
| rm -rf ./config && rm -rf ./rules/ | |
| curl -O https://raw.githubusercontent.com/Yamato-Security/hayabusa-encoded-rules/refs/heads/main/encoded_rules.yml | |
| curl -O https://raw.githubusercontent.com/Yamato-Security/hayabusa-encoded-rules/refs/heads/main/rules_config_files.txt | |
| - name: help | |
| run: cd main && ./hayabusa help | |
| - name: update-rules | |
| run: cd main && ./hayabusa update-rules -q | |
| - name: computer-metrics | |
| run: cd main && ./hayabusa computer-metrics -d ../hayabusa-sample-evtx -q | |
| - name: csv-timeline | |
| run: cd main && ./hayabusa csv-timeline -d ../hayabusa-sample-evtx -o out.csv -q -w -D -n -u | |
| - name: csv-timeline(-p super-verbose) | |
| run: cd main && ./hayabusa csv-timeline -d ../hayabusa-sample-evtx -o out-s.csv -p super-verbose -q -w -D -n -u | |
| - name: eid-metrics | |
| run: cd main && ./hayabusa eid-metrics -d ../hayabusa-sample-evtx -q | |
| - name: json-timeline | |
| run: cd main && ./hayabusa json-timeline -d ../hayabusa-sample-evtx -o out.json -q -w -D -n -u | |
| - name: json-timeline(-p super-verbose) | |
| run: cd main && ./hayabusa json-timeline -d ../hayabusa-sample-evtx -o out-s.json -p super-verbose -q -w -D -n -u | |
| - name: json-timeline(-L) | |
| run: cd main && ./hayabusa json-timeline -d ../hayabusa-sample-evtx -o out.jsonl -q -L -w -D -n -u | |
| - name: level-tuning | |
| run: cd main && ./hayabusa level-tuning -f ./rules/config/level_tuning.txt -q | |
| - name: list-contributors | |
| run: cd main && ./hayabusa list-contributors -q | |
| - name: list-profiles | |
| run: cd main && ./hayabusa list-profiles -q | |
| - name: logon-summary | |
| run: cd main && ./hayabusa logon-summary -d ../hayabusa-sample-evtx -q | |
| - name: pivot-keywords-list | |
| run: cd main && ./hayabusa pivot-keywords-list -d ../hayabusa-sample-evtx -o key -q -w | |
| - name: search | |
| run: cd main && ./hayabusa search -d ../hayabusa-sample-evtx -k mimikatz -o search.csv -q | |
| - name: set-default-profile | |
| run: cd main && ./hayabusa set-default-profile -p verbose -q |