feat: extend match_all option to tau patterns

WithSecureLabs / chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

GNU General Public License v3.0

2.7k stars 242 forks source link

feat: extend match_all option to tau patterns #165

Closed FranticTyping closed 4 months ago

FranticTyping commented 4 months ago

Change the default behaviour when multiple tau rules are provided from logical AND to logical OR. Extend the 'match_all' flag to toggle multiple tau rules from AND to OR conditions