feat: extend match_all option to tau patterns

WithSecureLabs / chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

GNU General Public License v3.0

2.89k stars 266 forks source link

feat: extend match_all option to tau patterns #165

Closed FranticTyping closed 7 months ago

FranticTyping commented 7 months ago

Change the default behaviour when multiple tau rules are provided from logical AND to logical OR. Extend the 'match_all' flag to toggle multiple tau rules from AND to OR conditions