Yamato-Security / hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
GNU Affero General Public License v3.0
2.32k stars 203 forks source link

make `search` command not sort by default #1475

Open YamatoSecurity opened 2 weeks ago

YamatoSecurity commented 2 weeks ago

By default, the search command will sort results and therefore more of memory. I would like to have it print results whenever something is found and use as little memory as possible unless -s, --sort-events Sort events before saving the file. (warning: this uses much more memory!) under General Options is enabled. (just like csv-timeline)