Justin Ibarra 0a992d716a [Rule Tuning] Update EQL rules for 7.10 (#399) ...

* update syntax to reflect eql changes
* use more case-insensitivity
* comment out missing fields for winlogbeat compatibility

2020-10-21 12:35:18 -08:00

..

schemas

[New Rule] Initial converted EQL rules (#304)

2020-09-30 21:40:55 -08:00

__init__.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00

__main__.py

Switch to click.echo() for the banner

2020-06-29 23:58:20 -06:00

attack.py

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00

beats.py

Add EQL rules and schema validation (#297)

2020-09-16 08:36:48 -06:00

docs.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00

ecs.py

[New Rule] Initial converted EQL rules (#304)

2020-09-30 21:40:55 -08:00

eswrap.py

[Bug fix] Add missing parenthesis for -kibana-url

2020-09-30 09:32:43 -06:00

main.py

Collect unique query fields per rule (#296)

2020-09-23 14:36:34 -08:00

mappings.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00

misc.py

Collect unique query fields per rule (#296)

2020-09-23 14:36:34 -08:00

packaging.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00

rule_formatter.py

[New Rule] Initial converted EQL rules (#304)

2020-09-30 21:40:55 -08:00

rule_loader.py

Add EQL rules and schema validation (#297)

2020-09-16 08:36:48 -06:00

rule.py

[Rule Tuning] Update EQL rules for 7.10 (#399)

2020-10-21 12:35:18 -08:00

semver.py

Fix kibana-diff command (#198)

2020-09-02 12:19:17 -05:00

utils.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00