646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
66 lines
1.4 KiB
Nix
66 lines
1.4 KiB
Nix
{
|
|
lib,
|
|
fetchFromGitHub,
|
|
makeWrapper,
|
|
python3,
|
|
}:
|
|
|
|
python3.pkgs.buildPythonApplication rec {
|
|
pname = "zircolite";
|
|
version = "2.40.0";
|
|
format = "other";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "wagga40";
|
|
repo = "Zircolite";
|
|
tag = version;
|
|
hash = "sha256-11jNd7Ids2aB+R+Hv6n8Wfm2hDuKCxC0EMZSBWJfDos=";
|
|
};
|
|
|
|
__darwinAllowLocalNetworking = true;
|
|
|
|
build-system = [
|
|
makeWrapper
|
|
];
|
|
|
|
dependencies =
|
|
with python3.pkgs;
|
|
[
|
|
aiohttp
|
|
colorama
|
|
elastic-transport
|
|
elasticsearch
|
|
evtx
|
|
jinja2
|
|
lxml
|
|
orjson
|
|
requests
|
|
tqdm
|
|
urllib3
|
|
xxhash
|
|
]
|
|
++ elasticsearch.optional-dependencies.async;
|
|
|
|
installPhase = ''
|
|
runHook preInstall
|
|
|
|
mkdir -p $out/bin $out/share $out/share/zircolite
|
|
cp -R . $out/share/zircolite
|
|
|
|
makeWrapper ${python3.interpreter} $out/bin/zircolite \
|
|
--set PYTHONPATH "$PYTHONPATH:$out/bin/zircolite.py" \
|
|
--add-flags "$out/share/zircolite/zircolite.py"
|
|
|
|
runHook postInstall
|
|
'';
|
|
|
|
meta = with lib; {
|
|
description = "SIGMA-based detection tool for EVTX, Auditd, Sysmon and other logs";
|
|
mainProgram = "zircolite";
|
|
homepage = "https://github.com/wagga40/Zircolite";
|
|
changelog = "https://github.com/wagga40/Zircolite/releases/tag/${src.tag}";
|
|
license = licenses.gpl3Only;
|
|
maintainers = with maintainers; [ fab ];
|
|
};
|
|
}
|