Files
blue-team-tools/tools/sigma
redsand (Tim Shelton) bc334ab456 Hawk backend support for wildcard in middle of string (#2273)
* updating yaml cfg for ms eventlog support

* update config and sigma backend, so that comments are not replaced, but rather the details of the record

* updating scriptblocktext to value

* adding a few missing ip address translations

* Fixing error when handling comparisons of null values, and additional fix of lack of support for not

* adding additional translations for missing category entries

* fixing error when handling list of ors with a not indicator

* finishes support for windows translations, pending qa

* adding dedupe feature and additional translation fix for dns-server

* adding image_loaded translation

* forced to pull back on the aggressive deduping, caused some inaccuracies

* adding more ux friendly formatting for regex

* adds support for wildcards in middle of strings

* adding a missing null check for supporting null matching

* adding cisco, av, and django cfg in yaml. updated apache in yaml and added another translation for ip_dport
2021-11-18 06:29:41 +01:00
..
2021-10-28 20:56:19 +02:00
2019-11-11 23:35:16 +01:00
2021-08-22 08:57:07 +02:00
2021-09-05 17:50:54 +02:00
2021-08-18 19:00:57 +00:00
2020-06-06 01:03:02 +02:00