1- use std:: collections:: { hash_map :: DefaultHasher , BTreeMap , HashMap , HashSet } ;
1+ use std:: collections:: { BTreeMap , HashMap , HashSet , hash_map :: DefaultHasher } ;
22use std:: fs;
33use std:: hash:: { Hash , Hasher } ;
44use std:: io:: * ;
@@ -7,16 +7,16 @@ use std::time::Duration;
77use chrono:: { DateTime , Local , NaiveDateTime , SecondsFormat , TimeZone , Utc } ;
88use chrono_tz:: Tz ;
99use indicatif:: { ProgressBar , ProgressDrawTarget , ProgressStyle } ;
10- use prettytable:: { cell , format , Row , Table } ;
10+ use prettytable:: { Row , Table , cell , format } ;
1111use rustc_hash:: FxHashMap ;
1212use serde:: Serialize ;
13- use serde_json:: { value :: RawValue , Map , Number , Value as Json } ;
13+ use serde_json:: { Map , Number , Value as Json , value :: RawValue } ;
1414use tau_engine:: { Document , Value as Tau } ;
1515use uuid:: Uuid ;
1616
1717use crate :: analyse:: shimcache:: { TimelineEntity , TimelineTimestamp , TimestampType } ;
18- use crate :: file:: hve:: shimcache:: EntryType ;
1918use crate :: file:: Kind as FileKind ;
19+ use crate :: file:: hve:: shimcache:: EntryType ;
2020use crate :: hunt:: { Detections , Hunt , Kind } ;
2121use crate :: rule:: { Kind as RuleKind , Level , Rule , Status } ;
2222use crate :: value:: Value ;
@@ -236,7 +236,7 @@ fn agg_to_doc<'a>(
236236 Ok ( crate :: hunt:: Document {
237237 kind : first. kind . clone ( ) ,
238238 path : first. path ,
239- data : bincode:: serde:: encode_to_vec ( & Value :: Object ( doc) , bincode:: config:: standard ( ) )
239+ data : bincode:: serde:: encode_to_vec ( Value :: Object ( doc) , bincode:: config:: standard ( ) )
240240 . expect ( "could not serialise collated documents" ) ,
241241 } )
242242}
@@ -607,11 +607,13 @@ pub fn print_detections(
607607 }
608608 cells. push ( cell ! ( table) ) ;
609609 } else {
610- cells. push ( cell ! ( rules
611- . iter( )
612- . map( |rule| format!( "{} {}" , RULE_PREFIX , split_tag( rule. name( ) ) ) )
613- . collect:: <Vec <_>>( )
614- . join( "\n " ) ) ) ;
610+ cells. push ( cell ! (
611+ rules
612+ . iter( )
613+ . map( |rule| format!( "{} {}" , RULE_PREFIX , split_tag( rule. name( ) ) ) )
614+ . collect:: <Vec <_>>( )
615+ . join( "\n " )
616+ ) ) ;
615617 }
616618 cells. extend ( row) ;
617619 table. add_row ( Row :: new ( cells) ) ;
0 commit comments