security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,012 Commits 1 Branch 0 Tags
6bdfddac8edea5e327bf28aed7e6dc4a7f701dc6
Commit Graph

4 Commits

Author SHA1 Message Date
Justin Ibarra 6bdfddac8e Expand timestamp override tests (#1907) 
* Expand timestamp_override tests
* removed timestamp_override from eql sequence rules
* add config entry for eql rules with beats index and t_o
* add timestamp_override to missing fields
 2022-04-01 15:27:08 -08:00
Justin Ibarra 3fc34b86f2 Update License to Elastic v2 (#944) 2021-03-03 22:12:11 -09:00
Justin Ibarra 645a0cd67b [Rule Tuning] Add timestamp_override to all query and non-sequence EQL rules (#945) 
* [Rule Tuning] Add timestamp_override field to rules
* add tests for lookback and timestamp_override
* fix dates and add test to ensure updated > creation
 2021-02-17 19:49:58 -09:00
Brent Murphy 70ca87138f [New Rule] Execution of COM object via Xwizard (#896) 
* Create execution_com_object_xwizard.toml

* spacing and query update

* add logs-windows.*
 2021-01-28 16:58:19 -05:00