[FR] Add Hunt Structure and Initial LLM Queries 🚀 (#3637)

This commit is contained in:
Mika Ayenson
2024-05-03 09:33:06 -05:00
committed by GitHub
parent 2668f5f762
commit 00b8a77f50
13 changed files with 463 additions and 0 deletions
+1
View File
@@ -28,6 +28,7 @@ Detection Rules contains more than just static rule files. This repository also
|------------------------------------------------ |------------------------------------------------------------------------------------ |
| [`detection_rules/`](detection_rules) | Python module for rule parsing, validating and packaging |
| [`etc/`](detection_rules/etc) | Miscellaneous files, such as ECS and Beats schemas |
|[`hunting`](./hunting/)|Root directory where threat hunting queries are stored|
| [`kibana/`](lib/kibana) | Python library for handling the API calls to Kibana and the Detection Engine |
| [`kql/`](lib/kql) | Python library for parsing and validating Kibana Query Language |
| [`rta/`](rta) | Red Team Automation code used to emulate attacker techniques, used for rule testing |