frack113 756a248032 update logsource

2023-01-04 18:52:24 +01:00

..

cti @ 4cbf8cc4bd

chore: update submodule cti

2022-11-22 16:21:25 +01:00

backend_config.yml

Fixes and CI testing of --backend-config

2019-03-15 23:46:38 +01:00

check-baseline-local.sh

chore: fix redirect to stderr

2022-10-11 16:25:03 +02:00

collection_repeat.yml

Improved testing

2017-11-01 21:14:11 +01:00

config-multiple_mapping-2.yml

Added tests

2018-11-04 22:16:20 +01:00

config-multiple_mapping.yml

Added tests

2018-11-04 22:16:20 +01:00

es-query-template.jq

CI: Testing backend es-qs against Elasticsearch

2018-04-04 00:32:48 +02:00

invalid_config.yml

Improved test coverage

2017-10-19 17:42:56 +02:00

invalid_sigma-invalid_aggregation.yml

Increased test coverage

2017-10-23 23:30:44 +02:00

invalid_sigma-invalid_identifier_reference.yml

Increased test coverage

2017-10-23 23:30:44 +02:00

invalid_sigma-no_condition.yml

Increased test coverage

2017-10-23 23:30:44 +02:00

invalid_sigma-no_identifiers.yml

Improved test coverage

2017-10-19 17:42:56 +02:00

invalid_sigma-wrong_identifier_definition.yml

Increased test coverage

2017-10-23 23:30:44 +02:00

invalid_yaml.badyml

Add yamllint to GHA

2021-07-26 21:26:16 -04:00

logsource.json

update logsource

2023-01-04 18:52:24 +01:00

mapping-conditional-multi.yml

Update rules to follow the Sigma state specification

2020-04-24 20:50:31 +02:00

test_logsource.py

update logsource

2023-01-04 18:52:24 +01:00

test_rules.py

feat: add bitlocker channel

2023-01-02 22:19:32 +01:00

test-backend-es-qs.py

fixed various spelling errors all over rules and source code

2021-02-24 14:43:13 +00:00

test-backend-netwitness.py

fixed various spelling errors all over rules and source code

2021-02-24 14:43:13 +00:00

test-base64offset-all.yml

Wrapping base64offset modified expansion group into ConditionOR

2022-05-01 23:07:25 +02:00

test-merge.sh

fix: bash script bug

2021-07-30 08:51:38 +02:00

test-modifiers.yml

Added modifiers: startswith and endswith

2019-11-05 23:04:13 +01:00

test-windash-all.yml

Windash modifier

2022-05-02 00:38:21 +02:00