From f060fd2038a4aa1992f3658792d31abf40ee2713 Mon Sep 17 00:00:00 2001 From: thl-cmk <thl-cmk@outlook.com> Date: Wed, 9 Mar 2022 19:11:49 +0000 Subject: [PATCH] Update HOWTO.md --- HOWTO.md | 40 ++++++++++++++++++++++------------------ 1 file changed, 22 insertions(+), 18 deletions(-) diff --git a/HOWTO.md b/HOWTO.md index 4b415fb..f890470 100644 --- a/HOWTO.md +++ b/HOWTO.md @@ -377,36 +377,40 @@ It wil then add all files affected by this CVE to the service. The information i | scanner option | bakery option | comment | | ------ | ------ | ------ | | target_path1 to n | Search method -> Search paths | -| -f [config_file_path] | Search method -> Search paths (bulk) | cve_2021_44228_log4j_search.cfg | -| --scan-log4j1 | Scan for log4j 1 versions (CVE-2021-4104) | -| --scan-logback | Scan for logback (CVE-2021-42550) | | -| --scan-zip | Scan zip files (increase timeout) | -| --force-fix | Fix files and backup -> Fix files. (Use at your own risk!) | Option was removed | -| --backup-path | Fix files and backup -> Backup directory (must exist) | Option was removed | | --all-drives | Search method -> All drives | Windows only | +| --api-key | Use Logpresso watch -> Logpresso watch API key | | +| --backup-path | Fix files and backup -> Backup directory (must exist) | Option was removed | +| --csv-log-path | Append results to log file -> Log file format -> CSV | +| --debug | Debug scanner | | --drives | Search method -> Drives to scan | Windows only | -| --no-symlink | Ignore symlinks | Linux only | | --exclude [path_prefix] | Exclude paths -> Exclude paths -> Exclude paths | | --exclude-config [config_file_path] | Exclude paths -> Exclude paths -> Exclude paths (bulk) | cve_2021_44228_log4j_exclude.cfg | -| --exclude-pattern [pattern] | Exclude paths -> Exclude paths by pattern | | --exclude-file-config [config_file_path] | Exclude files (bulk) | cve_2021_44228_log4j_exclude_files.cfg | | --exclude-fs | Exclude filesystems by type | -| --syslog-udp [host:port] | Enable syslog reporting -> Syslog server / Syslog server Port | -| --syslog-level [level] | Enable syslog reporting -> Loglevel | -| --syslog-facility [code] | Enable syslog reporting -> Facility | -| --rfc5424 | Enable syslog reporting -> Use RFC5424 syslog format | +| --exclude-pattern [pattern] | Exclude paths -> Exclude paths by pattern | +| -f [config_file_path] | Search method -> Search paths (bulk) | cve_2021_44228_log4j_search.cfg | +| --force-fix | Fix files and backup -> Fix files. (Use at your own risk!) | Option was removed | +| --http-proxy | Use Logpresso watch-> Use a http proxy server | | +| --json-log-path | Append results to log file -> Log file format -> JSON | +| --no-empty-report | Enable reporting -> Enable file reporting -> Don't create empty reports | +| --no-symlink | Ignore symlinks | Linux only | | --report-csv | Enable reporting -> Enable file reporting -> Report format -> CSV | +| --report-dir | Enable reporting -> Enable file reporting -> Report output directory (must exist) | | --report-json | Enable reporting -> Enable file reporting -> Report format -> JSON | +| --report-patch | Report safe files | | | --report-path | Enable reporting -> Send report to checkmk | log4j_report.json | -| --report-dir | Enable reporting -> Enable file reporting -> Report output directory (must exist) | -| --no-empty-report | Enable reporting -> Enable file reporting -> Don't create empty reports | -| --csv-log-path | Append results to log file -> Log file format -> CSV | -| --json-log-path | Append results to log file -> Log file format -> JSON | +| --rfc5424 | Enable syslog reporting -> Use RFC5424 syslog format | +| --scan-log4j1 | Scan for log4j 1 versions (CVE-2021-4104) | +| --scan-logback | Scan for logback (CVE-2021-42550) | | +| --scan-zip | Scan zip files (increase timeout) | | --silent | Silent output | -| --debug | Debug scanner | +| --syslog-facility [code] | Enable syslog reporting -> Facility | +| --syslog-level [level] | Enable syslog reporting -> Loglevel | +| --syslog-udp [host:port] | Enable syslog reporting -> Syslog server / Syslog server Port | | --throttle | Throttle | -| -Xmx | Max memory | | --trace | Trace scanner | Removed, produces to much data | +| -Xmx | Max memory | + </details> -- GitLab