fix: add supported extension jsonl

Yamato-Security · Dec 16, 2024 · 0a3107a · 0a3107a
1 parent 8e56e37
commit 0a3107a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/src/detections/configs.rs b/src/detections/configs.rs
@@ -2323,6 +2323,7 @@ pub fn get_target_extensions(arg: Option<&Vec<String>>, json_input_flag: bool) -
     let mut target_file_extensions: HashSet<String> = convert_option_vecs_to_hs(arg);
     if json_input_flag {
         target_file_extensions.insert(String::from("json"));
+        target_file_extensions.insert(String::from("jsonl"));
     } else {
         target_file_extensions.insert(String::from("evtx"));
     }

diff --git a/src/main.rs b/src/main.rs
@@ -1875,7 +1875,9 @@ impl App {
             }
 
             let (detection_tmp, cnt_tmp, tl_tmp, recover_cnt_tmp, mut detect_infos) =
-                if evtx_file.extension().unwrap() == "json" {
+                if evtx_file.extension().unwrap() == "json"
+                    || evtx_file.extension().unwrap() == "jsonl"
+                {
                     self.analysis_json_file(
                         (evtx_file, time_filter, target_event_ids, stored_static),
                         detection,