blue-team-tools/tools at f015c97dffebb23a69016f7d484c8c6e04f10a8d - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

SOC Prime f015c97dff Update ala-rule.py

2019-12-30 16:13:27 +02:00

..

Added ECS proxy configuration

2019-12-09 16:34:07 +01:00

Update ala-rule.py

2019-12-30 16:13:27 +02:00

add .keyword on aggs; add extra unit test

2019-11-14 14:34:50 +01:00

merge_sigma

Fixes for parser split

2018-07-27 00:02:07 +02:00

README.md

Sigma tools release 0.11

2019-05-30 22:56:38 +02:00

requirements-devel.txt

added unit test

2019-11-12 14:06:10 +01:00

requirements-misp.txt

Added requirements

2018-10-22 22:43:59 +02:00

requirements.txt

Intermediate refactoring commit: moving code into package

2017-12-08 21:45:05 +01:00

setup.cfg

Intermediate refactoring commit: moving code into package

2017-12-08 21:45:05 +01:00

setup.py

Added ECS proxy configuration

2019-12-09 16:34:07 +01:00

sigma2attack

Add sigma2attack

2019-12-19 00:00:13 +01:00

sigma2genericsigma

Added sigma-uuid tool

2019-11-11 23:35:16 +01:00

sigma2misp

Dropped .py suffix

2018-10-22 23:02:05 +02:00

sigma-similarity

sigma-similarity: primary rule set for restriction of comparison

2019-11-08 21:15:13 +01:00

sigma-uuid

Added hint on failed UUID check

2019-11-12 23:37:28 +01:00

sigmac

Allow ignore of type errors with sigmac -I

2019-11-08 23:56:39 +01:00

README.md

This package contains libraries for processing of Sigma rules and the following command line tools:

sigmac: converter between Sigma rules and SIEM queries:
- Elasticsearch query strings
- Kibana JSON with searches
- Splunk SPL queries
- Elasticsearch X-Pack Watcher
- Logpoint queries
merge_sigma: Merge Sigma collections into simple Sigma rules.
sigma2misp: Import Sigma rules to MISP events.