From 09618616bef132f870a8eb8ef2d005817a9cd6f7 Mon Sep 17 00:00:00 2001 From: "c.marescalco" Date: Tue, 31 Dec 2024 16:24:02 +0100 Subject: [PATCH 1/3] avoid file creation using sqlite.connect --- zircolite.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/zircolite.py b/zircolite.py index ff99068..f68392b 100755 --- a/zircolite.py +++ b/zircolite.py @@ -460,7 +460,7 @@ def create_connection(self, db): self.logger.debug(f"CONNECTING TO : {db}") try: if "?mode=memory&cache=shared" in db: - conn = sqlite3.connect(db, isolation_level=None) + conn = sqlite3.connect(db, isolation_level=None, uri=True) conn.execute("PRAGMA journal_mode = MEMORY;") conn.execute("PRAGMA synchronous = OFF;") conn.execute("PRAGMA temp_store = MEMORY;") From 733e51ca06a5014a0381a1a3d271e378a2281e52 Mon Sep 17 00:00:00 2001 From: "c.marescalco" Date: Tue, 31 Dec 2024 16:24:25 +0100 Subject: [PATCH 2/3] fix error when converting and saving ruleset --- zircolite.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/zircolite.py b/zircolite.py index f68392b..3a83ba8 100755 --- a/zircolite.py +++ b/zircolite.py @@ -1310,7 +1310,7 @@ def sigma_rules_to_ruleset(self, sigma_rules_list, pipelines): if self.save_ruleset: temp_ruleset_name = self.rand_ruleset_name(str(sigma_rules)) - with open(temp_ruleset_name, "w") as outfile: + with open(temp_ruleset_name, "w", encoding="utf-8") as outfile: outfile.write( orjson.dumps(ruleset, option=orjson.OPT_INDENT_2).decode( "utf-8" From 3ffef0f02c0590b433ba03ae18cf13ca215809eb Mon Sep 17 00:00:00 2001 From: Wagga <6437862+wagga40@users.noreply.github.com> Date: Wed, 1 Jan 2025 09:40:07 +0100 Subject: [PATCH 3/3] Update zircolite_dev.py too --- zircolite_dev.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/zircolite_dev.py b/zircolite_dev.py index 18a4950..c879e49 100755 --- a/zircolite_dev.py +++ b/zircolite_dev.py @@ -387,7 +387,7 @@ def create_connection(self, db): self.logger.debug(f"CONNECTING TO : {db}") try: if "?mode=memory&cache=shared" in db: - conn = sqlite3.connect(db, isolation_level=None) + conn = sqlite3.connect(db, isolation_level=None, uri=True) conn.execute('PRAGMA journal_mode = MEMORY;') conn.execute('PRAGMA synchronous = OFF;') conn.execute('PRAGMA temp_store = MEMORY;') @@ -1106,7 +1106,7 @@ def sigma_rules_to_ruleset(self, sigma_rules_list, pipelines): if self.save_ruleset: temp_ruleset_name = self.rand_ruleset_name(str(sigma_rules)) - with open(temp_ruleset_name, 'w') as outfile: + with open(temp_ruleset_name, 'w', encoding="utf-8") as outfile: outfile.write(orjson.dumps(ruleset, option=orjson.OPT_INDENT_2).decode('utf-8')) self.logger.info(f"{Fore.CYAN} [+] Saved ruleset as : {temp_ruleset_name}{Fore.RESET}")