Thomas Patzke 9bcff522b6 Merge branch 'master' of https://github.com/rashimo/sigma into pr-709

2020-07-07 23:12:03 +02:00

..

ala.py

Improved test coverage

2020-06-13 01:11:08 +02:00

arcsight.py

Added Humio, Crowdstrike, Corelight

2020-05-08 13:41:52 +03:00

base.py

Cleanup: removal of corelight_* backends

2020-05-24 22:41:38 +02:00

carbonblack.py

Add parentheses about field list groups in CB

2020-06-11 15:33:02 +02:00

csharp.py

comments for usage

2020-04-11 15:47:23 +02:00

data.py

Moved Sysmon schema XML from contrib directory into module

2019-03-16 00:59:29 +01:00

discovery.py

Added Humio, Crowdstrike, Corelight

2020-05-08 13:41:52 +03:00

ee-outliers.py

Updated author reference in license

2020-05-11 11:47:56 +02:00

elasticsearch.py

Add more Options for XPackWatcherBackend (Elasticsearch)

2020-06-09 20:57:26 +02:00

exceptions.py

Changed copyright notices accordingly

2018-07-24 00:01:16 +02:00

graylog.py

Graylog backend now derived from es-qs

2019-11-02 22:56:01 +01:00

humio.py

Added Humio, Crowdstrike, Corelight

2020-05-08 13:41:52 +03:00

limacharlie.py

Added Humio, Crowdstrike, Corelight

2020-05-08 13:41:52 +03:00

logiq.py

Fixes

2020-04-08 23:43:46 +02:00

logpoint.py

Default configurations for backends

2019-11-03 23:32:50 +01:00

mdatp.py

Updating the mdatp backend file as it is currently impossible to set an ActionType as there is no mapping to EventType

2020-06-30 14:49:29 +01:00

misc.py

Conditional field mapping for null values

2019-04-25 23:24:05 +02:00

mixins.py

Using rule ids as Kibana object id

2020-01-30 11:30:01 +01:00

netwitness.py

Default configurations for backends

2019-11-03 23:32:50 +01:00

powershell.py

Default configurations for backends

2019-11-03 23:32:50 +01:00

qradar.py

Fixed undefined value in exception handling

2020-04-08 22:28:47 +02:00

qualys.py

Default configurations for backends

2019-11-03 23:32:50 +01:00

splunk.py

Cleanup: removal of corelight_* backends

2020-05-24 22:41:38 +02:00

sql.py

Remove unused function

2020-05-30 01:57:06 +02:00

sqlite.py

Remove unused function

2020-05-30 01:57:06 +02:00

stix.py

stix backend + mapping configurations for windows logs and qradar

2020-07-07 15:04:16 +03:00

sumologic.py

Default configurations for backends

2019-11-03 23:32:50 +01:00

tools.py

Conditional field mapping for null values

2019-04-25 23:24:05 +02:00