Nasreddine Bencherchali a25027fef8 fix: rename links from old repo to SigmaHQ

2022-12-27 21:05:16 +01:00

..

ala.py

Merge pull request #1696 from denny-lclin/lclin/fix-ada-wildcard

2021-10-16 20:46:23 +02:00

arcsight.py

Added Humio, Crowdstrike, Corelight

2020-05-08 13:41:52 +03:00

athena.py

Correct for proper output to Splunk and CarbonBlack. Add AWS Athena config/backend support

2021-09-13 14:17:33 -05:00

base.py

Fix: Subexpression with OR instead of OR

2022-05-01 23:17:33 +02:00

carbonblack.py

Change location value=str(value)

2021-11-01 16:05:34 +01:00

chronicle.py

Chronicle Security Backend contributed by SOC Prime.

2021-03-12 12:21:44 +02:00

cim.py

New registry category

2022-03-26 19:05:38 +01:00

csharp.py

comments for usage

2020-04-11 15:47:23 +02:00

data.py

Moved Sysmon schema XML from contrib directory into module

2019-03-16 00:59:29 +01:00

datadog.py

Update datadog sigmac

2022-09-28 08:30:03 -04:00

devo.py

Removed empty line

2022-04-28 13:18:11 +10:00

discovery.py

Added Humio, Crowdstrike, Corelight

2020-05-08 13:41:52 +03:00

dnif.py

added new backend for DNIF queries

2022-06-30 13:03:54 +05:30

ee-outliers.py

Update "sigmac -l" message

2021-08-28 08:51:58 +02:00

elasticsearch.py

Update elasticsearch.py

2022-11-07 12:46:09 +04:00

exceptions.py

Changed copyright notices accordingly

2018-07-24 00:01:16 +02:00

fireeye-helix.py

Fix SyntaxWarning for 'is' on fireeye-helix backend

2021-04-17 12:55:13 +02:00

fortisiem.py

Example:

2022-03-09 11:26:07 -08:00

graylog.py

Escape spaces in graylog backend

2021-07-02 21:56:08 +01:00

hawk.py

HAWK backend configuration update and bug fix.

2022-11-15 17:38:29 +00:00

hedera.py

created hedera backend file

2022-05-08 15:59:14 +02:00

humio.py

Added:

2020-10-06 15:07:52 +03:00

lacework.py

feat(backend): add support for linux.network_connection

2022-09-20 13:47:17 -05:00

limacharlie.py

Support alternate case for OriginalFileName.

2022-05-27 11:01:22 -07:00

logiq.py

Fixes

2020-04-08 23:43:46 +02:00

logpoint.py

Default configurations for backends

2019-11-03 23:32:50 +01:00

mdatp.py

Adding a mapping check to escape slashes in KQL

2022-06-18 09:02:21 -04:00

misc.py

Conditional field mapping for null values

2019-04-25 23:24:05 +02:00

mixins.py

Allow ints as values in ALA backend

2021-08-24 16:00:08 -04:00

netwitness-epl.py

Update netwitness-epl.py

2021-03-09 17:41:54 +01:00

netwitness.py

Update netwitness.py

2021-03-09 17:43:44 +01:00

opensearch.py

moved default values to backend file

2021-09-09 15:02:59 -07:00

powershell.py

More generic remapping for PowerShell backend

2021-06-20 07:58:01 +02:00

qradar.py

Optimizing Qradar query generation in cases where field definitions are missing

2021-01-26 15:24:44 +01:00

qualys.py

Default configurations for backends

2019-11-03 23:32:50 +01:00

splunk.py

Splunk puts AND always into parentheses

2022-09-09 22:30:00 +02:00

splunkdm.py

clean

2021-07-10 22:13:09 +02:00

sql.py

Fix double quotes escaping and values with commas in SQLite/SQL backends

2021-11-11 20:55:01 +01:00

sqlite.py

Update Sqlite backend to handle null values

2022-08-20 12:23:00 +02:00

stix.py

New configuration layout: stix2.0 for basic stix mapings, stix-shifter to match the OCA stix-shifter mappings and stix-custom for the unsupported mappings

2021-02-08 10:56:31 +02:00

streamalert.py

Add StreamAlert backend

2022-05-03 17:32:19 +07:00

sumologic.py

fixed various spelling errors all over rules and source code

2021-02-24 14:43:13 +00:00

sysmon.py

Update sysmon.py (#2234)

2021-11-10 20:43:13 +01:00

tools.py

fixed various spelling errors all over rules and source code

2021-02-24 14:43:13 +00:00

uberagent.py

fix: rename links from old repo to SigmaHQ

2022-12-27 21:05:16 +01:00