BruceEDR-Framework/BruceEDR.csproj at main · dboudreau00/BruceEDR-Framework · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
<Project Sdk="Microsoft.NET.Sdk">

  <PropertyGroup>
    <OutputType>Exe</OutputType>
    <TargetFramework>net8.0-windows</TargetFramework>
    <Platforms>x64</Platforms>
    <PlatformTarget>x64</PlatformTarget>
    <Nullable>enable</Nullable>
    <ImplicitUsings>enable</ImplicitUsings>
    <AssemblyName>BruceEDR</AssemblyName>
    <RootNamespace>BruceEDR</RootNamespace>
    <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
    <InvariantGlobalization>true</InvariantGlobalization>
    <!-- Same mark as the GUI, so BruceEDR.exe is recognizable in Explorer. -->
    <ApplicationIcon>gui\BruceEDR.Gui\Assets\bruce.ico</ApplicationIcon>
  </PropertyGroup>

  <!-- Optional YARA engine. OFF by default so the standard build carries no
       dependency on dnYara's managed/native API surface. Turn it on with:
         dotnet build -c Release -p:EnableYara=true
       When off, YaraMemoryScanner is a stub and the agent uses the builtin scanner. -->
  <PropertyGroup Condition="'$(EnableYara)' == 'true'">
    <DefineConstants>$(DefineConstants);YARA_ENABLED</DefineConstants>
  </PropertyGroup>

  <ItemGroup>
    <PackageReference Include="Microsoft.Diagnostics.Tracing.TraceEvent" Version="3.1.9" />
    <PackageReference Include="System.Management" Version="8.0.0" />
    <PackageReference Include="Microsoft.Extensions.Hosting" Version="8.0.1" />
    <PackageReference Include="Microsoft.Extensions.Hosting.WindowsServices" Version="8.0.1" />
  </ItemGroup>

  <ItemGroup Condition="'$(EnableYara)' == 'true'">
    <PackageReference Include="dnYara" Version="2.1.0" />
  </ItemGroup>

  <!-- The xUnit test project lives under tests/. Keep its sources (and any generated
       files under tests/**/obj) out of the application build. -->
  <ItemGroup>
    <Compile Remove="tests/**/*.cs" />
    <None Remove="tests/**/*" />
    <EmbeddedResource Remove="tests/**/*" />
  </ItemGroup>

  <!-- The WPF GUI is its own project under gui/; keep it out of the console build. -->
  <ItemGroup>
    <Compile Remove="gui/**/*.cs" />
    <None Remove="gui/**/*" />
    <EmbeddedResource Remove="gui/**/*" />
    <Page Remove="gui/**/*" />
  </ItemGroup>

  <!-- The C kernel driver under kernel/ is built separately with the WDK; it is not
       part of the C# compilation. Exclude it from item globs for a clean project. -->
  <ItemGroup>
    <None Remove="kernel/**/*" />
  </ItemGroup>

  <ItemGroup>
    <AssemblyAttribute Include="System.Runtime.CompilerServices.InternalsVisibleToAttribute">
      <_Parameter1>BruceEDR.Tests</_Parameter1>
    </AssemblyAttribute>
  </ItemGroup>

  <ItemGroup>
    <None Update="bruce.config.json" CopyToOutputDirectory="PreserveNewest" />
    <None Update="rules\**\*.yar" CopyToOutputDirectory="PreserveNewest" />
    <!-- Declarative detection rule packs and the replay scenarios are runtime content:
         the agent loads them from disk at startup and the console can replay them. -->
    <None Update="rules\**\*.json" CopyToOutputDirectory="PreserveNewest" />
    <None Update="Replay\scenarios\**\*.jsonl" CopyToOutputDirectory="PreserveNewest" />
    <None Update="intel\feeds\**\*.txt" CopyToOutputDirectory="PreserveNewest" />
    <!-- Offline geo assets for the network map (public-domain sources; see intel/geo/README.md). -->
    <None Update="intel\geo\ipv4-country.bin" CopyToOutputDirectory="PreserveNewest" />
    <None Update="intel\geo\countries.csv" CopyToOutputDirectory="PreserveNewest" />
    <None Update="intel\geo\world.txt" CopyToOutputDirectory="PreserveNewest" />
  </ItemGroup>

</Project>