 Ben de Haan
|
d18751a0ea
|
Added LogPoint backend
|
2017-03-18 11:12:06 +01:00 |
|
|
Thomas Patzke
|
d1030ec053
|
Fieldlist backend
Lists all fields used in given rules.
|
2017-03-06 22:47:30 +01:00 |
|
|
Thomas Patzke
|
05df298d45
|
Field mappings
|
2017-03-06 22:07:04 +01:00 |
|
|
Florian Roth
|
47bfe82cc4
|
Splunk specifics
|
2017-03-04 10:37:40 +01:00 |
|
|
Thomas Patzke
|
8f3541f0a0
|
Added Splunk backend
|
2017-03-02 23:34:12 +01:00 |
|
|
Thomas Patzke
|
2dd1c7cd12
|
Deactivated not implemented backends
|
2017-03-02 22:55:45 +01:00 |
|
|
Thomas Patzke
|
9556e73cd1
|
Fix: automatic escaping of * and ? in es-qs backend removed
|
2017-03-02 12:07:07 +01:00 |
|
|
Thomas Patzke
|
10ee9c64fe
|
Moved node output into dedicated backend class methods
|
2017-03-01 21:47:51 +01:00 |
|
|
Thomas Patzke
|
e0f813ebbb
|
Conversion to Elasticsearch Query Strings
First version of sigmac that converts Sigma YAMLs without aggregations
into ES Query Strings suitable for Kibana or other tools.
|
2017-03-01 00:03:34 +01:00 |
|
|
Thomas Patzke
|
1498d787e7
|
Added Sigma converter skeleton
* YAML parsing
* argument parsing
* empty backend classes
|
2017-02-13 23:28:53 +01:00 |
|