-
-
Notifications
You must be signed in to change notification settings - Fork 18
/
Copy pathcoverage.txt
172 lines (172 loc) · 11.5 KB
/
coverage.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
github.com/0xrawsec/gene/v2/engine/buffer.go:18: newSeekBuffer 100.0%
github.com/0xrawsec/gene/v2/engine/buffer.go:25: Read 100.0%
github.com/0xrawsec/gene/v2/engine/buffer.go:36: Seek 57.1%
github.com/0xrawsec/gene/v2/engine/buffer.go:60: Len 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:28: NewTokenizer 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:64: NextToken 77.8%
github.com/0xrawsec/gene/v2/engine/conditions.go:81: NextExpectedToken 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:99: ParseCondition 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:175: Read 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:194: GetGroup 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:216: GetLevels 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:237: maxLevel 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:247: Simplify 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:257: Prioritize 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:275: GetOperands 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:291: String 85.7%
github.com/0xrawsec/gene/v2/engine/conditions.go:304: Pretty 96.3%
github.com/0xrawsec/gene/v2/engine/conditions.go:352: DebugString 57.1%
github.com/0xrawsec/gene/v2/engine/conditions.go:370: splitLevelsByOr 94.1%
github.com/0xrawsec/gene/v2/engine/conditions.go:397: Pretty 66.7%
github.com/0xrawsec/gene/v2/engine/conditions.go:405: Compute 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:413: nextCondEltLowerLevel 100.0%
github.com/0xrawsec/gene/v2/engine/conditions.go:425: compute 88.4%
github.com/0xrawsec/gene/v2/engine/containers.go:19: NewContainers 100.0%
github.com/0xrawsec/gene/v2/engine/containers.go:25: AddNewContainer 100.0%
github.com/0xrawsec/gene/v2/engine/containers.go:31: AddContainer 75.0%
github.com/0xrawsec/gene/v2/engine/containers.go:41: AddStringToContainer 100.0%
github.com/0xrawsec/gene/v2/engine/containers.go:52: Len 66.7%
github.com/0xrawsec/gene/v2/engine/containers.go:60: Has 100.0%
github.com/0xrawsec/gene/v2/engine/containers.go:66: Get 100.0%
github.com/0xrawsec/gene/v2/engine/containers.go:72: ContainsString 66.7%
github.com/0xrawsec/gene/v2/engine/containers.go:79: String 100.0%
github.com/0xrawsec/gene/v2/engine/detection.go:21: MarshalJSON 90.9%
github.com/0xrawsec/gene/v2/engine/detection.go:46: NewDetection 100.0%
github.com/0xrawsec/gene/v2/engine/detection.go:69: HasActions 100.0%
github.com/0xrawsec/gene/v2/engine/detection.go:76: HasAttack 100.0%
github.com/0xrawsec/gene/v2/engine/detection.go:83: Update 92.9%
github.com/0xrawsec/gene/v2/engine/detection.go:117: OnlyMatchedFilters 100.0%
github.com/0xrawsec/gene/v2/engine/detection.go:121: AlsoMatchedFilter 100.0%
github.com/0xrawsec/gene/v2/engine/detection.go:125: Names 100.0%
github.com/0xrawsec/gene/v2/engine/detection.go:133: IsAlert 100.0%
github.com/0xrawsec/gene/v2/engine/detection.go:137: Count 0.0%
github.com/0xrawsec/gene/v2/engine/engine.go:21: seekerGoto 75.0%
github.com/0xrawsec/gene/v2/engine/engine.go:29: nextRuleOffset 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:44: findLineError 50.0%
github.com/0xrawsec/gene/v2/engine/engine.go:90: Error 0.0%
github.com/0xrawsec/gene/v2/engine/engine.go:128: NewEngine 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:152: AddLogFormat 0.0%
github.com/0xrawsec/gene/v2/engine/engine.go:157: addRule 72.7%
github.com/0xrawsec/gene/v2/engine/engine.go:199: loadReader 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:230: SetDumpRaw 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:235: SetFilters 75.0%
github.com/0xrawsec/gene/v2/engine/engine.go:246: SetDefaultActions 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:254: SetShowAttck 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:259: Count 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:264: Tags 0.0%
github.com/0xrawsec/gene/v2/engine/engine.go:275: AddToContainer 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:280: Blacklist 0.0%
github.com/0xrawsec/gene/v2/engine/engine.go:285: Whitelist 0.0%
github.com/0xrawsec/gene/v2/engine/engine.go:290: BlacklistLen 0.0%
github.com/0xrawsec/gene/v2/engine/engine.go:295: WhitelistLen 0.0%
github.com/0xrawsec/gene/v2/engine/engine.go:301: GetRawRule 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:321: GetRawRuleByName 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:327: GetRuleNames 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:336: GetCRuleByName 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:344: LoadTemplate 0.0%
github.com/0xrawsec/gene/v2/engine/engine.go:353: LoadContainer 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:364: LoadReader 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:370: LoadDirectory 60.6%
github.com/0xrawsec/gene/v2/engine/engine.go:430: LoadFile 71.4%
github.com/0xrawsec/gene/v2/engine/engine.go:442: LoadRule 71.4%
github.com/0xrawsec/gene/v2/engine/engine.go:476: LoadBytes 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:481: LoadString 100.0%
github.com/0xrawsec/gene/v2/engine/engine.go:487: MatchOrFilter 100.0%
github.com/0xrawsec/gene/v2/engine/event.go:21: EventGetString 80.0%
github.com/0xrawsec/gene/v2/engine/event.go:35: Set 90.0%
github.com/0xrawsec/gene/v2/engine/event.go:54: Get 100.0%
github.com/0xrawsec/gene/v2/engine/event.go:71: SetDetection 100.0%
github.com/0xrawsec/gene/v2/engine/event.go:76: GetDetection 100.0%
github.com/0xrawsec/gene/v2/engine/event.go:86: Source 75.0%
github.com/0xrawsec/gene/v2/engine/event.go:94: Computer 75.0%
github.com/0xrawsec/gene/v2/engine/event.go:102: EventID 83.3%
github.com/0xrawsec/gene/v2/engine/event.go:114: Timestamp 80.0%
github.com/0xrawsec/gene/v2/engine/event.go:124: Type 100.0%
github.com/0xrawsec/gene/v2/engine/filters.go:9: NewEventFilter 100.0%
github.com/0xrawsec/gene/v2/engine/filters.go:20: match 71.4%
github.com/0xrawsec/gene/v2/engine/filters.go:36: IsEmpty 100.0%
github.com/0xrawsec/gene/v2/engine/filters.go:40: Match 100.0%
github.com/0xrawsec/gene/v2/engine/matches.go:48: IsFieldMatch 100.0%
github.com/0xrawsec/gene/v2/engine/matches.go:53: ParseFieldMatch 76.2%
github.com/0xrawsec/gene/v2/engine/matches.go:93: parseToFloat 40.0%
github.com/0xrawsec/gene/v2/engine/matches.go:104: Compile 87.5%
github.com/0xrawsec/gene/v2/engine/matches.go:149: GetName 100.0%
github.com/0xrawsec/gene/v2/engine/matches.go:154: Match 79.2%
github.com/0xrawsec/gene/v2/engine/matches.go:204: String 0.0%
github.com/0xrawsec/gene/v2/engine/matches.go:230: ParseContainerMatch 90.9%
github.com/0xrawsec/gene/v2/engine/matches.go:250: IsContainerMatch 100.0%
github.com/0xrawsec/gene/v2/engine/matches.go:255: NewContainerMatch 100.0%
github.com/0xrawsec/gene/v2/engine/matches.go:263: SetContainerDB 100.0%
github.com/0xrawsec/gene/v2/engine/matches.go:268: Compile 100.0%
github.com/0xrawsec/gene/v2/engine/matches.go:281: ExtractFromString 80.0%
github.com/0xrawsec/gene/v2/engine/matches.go:291: Extract 66.7%
github.com/0xrawsec/gene/v2/engine/matches.go:301: Match 77.8%
github.com/0xrawsec/gene/v2/engine/matches.go:318: GetName 100.0%
github.com/0xrawsec/gene/v2/engine/matches.go:322: String 100.0%
github.com/0xrawsec/gene/v2/engine/path.go:32: splitPath 100.0%
github.com/0xrawsec/gene/v2/engine/path.go:39: path 100.0%
github.com/0xrawsec/gene/v2/engine/path.go:45: IsAbsoluteXPath 100.0%
github.com/0xrawsec/gene/v2/engine/path.go:49: Path 100.0%
github.com/0xrawsec/gene/v2/engine/path.go:55: initFlags 100.0%
github.com/0xrawsec/gene/v2/engine/path.go:68: Get 100.0%
github.com/0xrawsec/gene/v2/engine/path.go:75: Last 66.7%
github.com/0xrawsec/gene/v2/engine/path.go:82: Merge 100.0%
github.com/0xrawsec/gene/v2/engine/path.go:88: Append 100.0%
github.com/0xrawsec/gene/v2/engine/path.go:94: String 100.0%
github.com/0xrawsec/gene/v2/engine/path.go:98: StartsWith 100.0%
github.com/0xrawsec/gene/v2/engine/path.go:107: Equal 81.8%
github.com/0xrawsec/gene/v2/engine/path.go:136: Len 100.0%
github.com/0xrawsec/gene/v2/engine/rules.go:24: bound 66.7%
github.com/0xrawsec/gene/v2/engine/rules.go:52: NewCompiledRule 100.0%
github.com/0xrawsec/gene/v2/engine/rules.go:65: AddMatcher 100.0%
github.com/0xrawsec/gene/v2/engine/rules.go:70: SetContainers 0.0%
github.com/0xrawsec/gene/v2/engine/rules.go:75: matchOS 66.7%
github.com/0xrawsec/gene/v2/engine/rules.go:82: metaMatch 83.3%
github.com/0xrawsec/gene/v2/engine/rules.go:98: Match 87.5%
github.com/0xrawsec/gene/v2/engine/rules.go:118: operandReader 100.0%
github.com/0xrawsec/gene/v2/engine/rules.go:131: Read 66.7%
github.com/0xrawsec/gene/v2/engine/rules.go:190: NewRuleDecoder 100.0%
github.com/0xrawsec/gene/v2/engine/rules.go:197: NewRule 0.0%
github.com/0xrawsec/gene/v2/engine/rules.go:216: IsDisabled 100.0%
github.com/0xrawsec/gene/v2/engine/rules.go:221: ReplaceTemplate 100.0%
github.com/0xrawsec/gene/v2/engine/rules.go:228: JSON 100.0%
github.com/0xrawsec/gene/v2/engine/rules.go:233: resolveLogType 100.0%
github.com/0xrawsec/gene/v2/engine/rules.go:262: Compile 66.7%
github.com/0xrawsec/gene/v2/engine/rules.go:269: compile 80.4%
github.com/0xrawsec/gene/v2/engine/rules.go:369: LoadRule 83.3%
github.com/0xrawsec/gene/v2/engine/template.go:19: Replace 100.0%
github.com/0xrawsec/gene/v2/engine/template.go:31: NewTemplateMap 100.0%
github.com/0xrawsec/gene/v2/engine/template.go:38: LoadReader 75.0%
github.com/0xrawsec/gene/v2/engine/template.go:57: AddTemplate 100.0%
github.com/0xrawsec/gene/v2/engine/template.go:62: GetTemplate 100.0%
github.com/0xrawsec/gene/v2/engine/template.go:68: ReplaceAll 85.7%
github.com/0xrawsec/gene/v2/engine/version.go:14: ParseVersion 100.0%
github.com/0xrawsec/gene/v2/engine/version.go:19: String 100.0%
github.com/0xrawsec/gene/v2/engine/version.go:23: Below 87.5%
github.com/0xrawsec/gene/v2/engine/version.go:38: Above 87.5%
github.com/0xrawsec/gene/v2/engine/version.go:53: Equals 100.0%
github.com/0xrawsec/gene/v2/engine/version.go:57: IsZero 100.0%
github.com/0xrawsec/gene/v2/engine/version.go:61: MarshalJSON 100.0%
github.com/0xrawsec/gene/v2/engine/version.go:65: UnmarshalJSON 80.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:15: BoundedScoreFormula 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:59: NewReducedStats 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:71: Copy 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:77: Update 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:120: ComputeScore 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:142: Finalize 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:169: String 80.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:190: NewReducer 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:196: Lock 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:202: RLock 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:206: Unlock 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:210: RUnlock 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:215: Update 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:232: ReduceCopy 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:243: Score 80.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:254: BoundedScore 85.7%
github.com/0xrawsec/gene/v2/reducer/reducer.go:266: MaxScore 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:289: Reset 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:296: Delete 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:303: CountUniqSigs 100.0%
github.com/0xrawsec/gene/v2/reducer/reducer.go:308: Print 100.0%
total: (statements) 87.0%