From bc450696665856c736e272b1b2540be554b5f0d8 Mon Sep 17 00:00:00 2001 From: fukusuket <41001169+fukusuket@users.noreply.github.com> Date: Wed, 8 May 2024 23:43:59 +0900 Subject: [PATCH] fix: add enable_all_rules option required restriction for J option --- src/detections/configs.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/detections/configs.rs b/src/detections/configs.rs index 28525aaba..177296797 100644 --- a/src/detections/configs.rs +++ b/src/detections/configs.rs @@ -941,7 +941,7 @@ impl Action { #[derive(Args, Clone, Debug)] pub struct DetectCommonOption { /// Scan JSON formatted logs instead of .evtx (.json or .jsonl) - #[arg(help_heading = Some("General Options"), short = 'J', long = "JSON-input", conflicts_with = "live_analysis", display_order = 360)] + #[arg(help_heading = Some("General Options"), short = 'J', long = "JSON-input", conflicts_with = "live_analysis", requires="enable_all_rules", display_order = 360)] pub json_input: bool, /// Specify additional evtx file extensions (ex: evtx_data)