[bug] Nothing is detected when using the `-J, --JSON-input` option with the timeline command because of `Channel` filter about hayabusa HOT 4 CLOSED

@fukusuket I think that is a good idea. Since the JSON(L) files won't usually be separated by Channel like evtx files then I think we can solve this by just requiring -A and -a whenever -J is specified.

from hayabusa.

Update: Since more options will usually confuse users, we should automatically disable the channel filter whenever the input is JSON, instead of EVTX

from hayabusa.

@YamatoSecurity @hitenkoku
I'm thinking about which is the best expected behavior...🤔, what do you think? Personally, I think it might be better to indicate that -A, --enable-all-rules /-a, --scan-all-evtx-files option is required...? (or if you have any other ideas, please let me know🙏)

from hayabusa.

@YamatoSecurity Thank you for comment! I'll Implement with the above specifications.

from hayabusa.