Make search command line options stricter

[YamatoSecurity]

-k or -r is not required so the user can run hayabusa like this:

./target/release/hayabusa search -d ../hayabusa-sample-evtx

╔╗ ╔╦═══╦╗  ╔╦═══╦══╗╔╗ ╔╦═══╦═══╗
║║ ║║╔═╗║╚╗╔╝║╔═╗║╔╗║║║ ║║╔═╗║╔═╗║
║╚═╝║║ ║╠╗╚╝╔╣║ ║║╚╝╚╣║ ║║╚══╣║ ║║
║╔═╗║╚═╝║╚╗╔╝║╚═╝║╔═╗║║ ║╠══╗║╚═╝║
║║ ║║╔═╗║ ║║ ║╔═╗║╚═╝║╚═╝║╚═╝║╔═╗║
╚╝ ╚╩╝ ╚╝ ╚╝ ╚╝ ╚╩═══╩═══╩═══╩╝ ╚╝
   by Yamato Security

Searching...

Start time: 2024/01/27 08:07

Total event log files: 1170
Total file size: 274.4 MB

Loading detection rules. Please wait.

or this:

./target/release/hayabusa search -d ../hayabusa-sample-evtx -F EventID:1

╔╗ ╔╦═══╦╗  ╔╦═══╦══╗╔╗ ╔╦═══╦═══╗
║║ ║║╔═╗║╚╗╔╝║╔═╗║╔╗║║║ ║║╔═╗║╔═╗║
║╚═╝║║ ║╠╗╚╝╔╣║ ║║╚╝╚╣║ ║║╚══╣║ ║║
║╔═╗║╚═╝║╚╗╔╝║╚═╝║╔═╗║║ ║╠══╗║╚═╝║
║║ ║║╔═╗║ ║║ ║╔═╗║╚═╝║╚═╝║╚═╝║╔═╗║
╚╝ ╚╩╝ ╚╝ ╚╝ ╚╝ ╚╩═══╩═══╩═══╩╝ ╚╝
   by Yamato Security

Searching...

Start time: 2024/01/27 08:05

Total event log files: 1170
Total file size: 274.4 MB

Loading detection rules. Please wait.

[00:00:04] 1,170 / 1,170   [========================================] 100%

Scanning finished. Please wait while the results are being saved.


No matches found.

Elapsed time: 00:00:09.667

and not get any results. I want to require in clap the user to specify either -k or -r.

Also, -M can be specified with -J or -L but this should not be possible. I want to give an error when the user specifies -J or -L with -M.