Justin Ibarra fa3b089c4c Add support for eql-wildcard and kql-match_only_text (#1583) ...

* Add support for eql-wildcard and kql-match_only_text
* bump kql version
* lookup elasticsearch type family prior to getting type hint
Co-authored-by: David French <56409778+threat-punter@users.noreply.github.com>

(cherry picked from commit d12c04761f)

2021-10-28 13:58:44 +00:00

..

schemas

[Bug] Tighten definitions validation patterns (#1396)

2021-10-26 15:27:32 +00:00

__init__.py

Refactor experimental ML CLI and code (#1218)

2021-06-02 20:37:12 -08:00

__main__.py

Move Rule into a dataclass (#1029)

2021-03-24 10:24:32 -06:00

attack.py

Update License to Elastic v2 (#944)

2021-03-03 22:12:11 -09:00

beats.py

Fix typos discovered by codespell (#1430)

2021-08-15 04:30:11 +00:00

cli_utils.py

Add min_stack_version to rule metadata (#1173)

2021-06-30 13:26:27 -08:00

devtools.py

[Bug] CLI Fixes (#1073)

2021-09-10 18:07:10 +00:00

docs.py

Add test for improper rule demotion (released production -> development) (#1555)

2021-10-20 05:48:26 +00:00

ecs.py

Add support for eql-wildcard and kql-match_only_text (#1583)

2021-10-28 13:58:44 +00:00

eswrap.py

Generate detection rule to alert on traffic to typosquatting/homonym domains (#1199)

2021-09-03 20:36:52 +00:00

ghwrap.py

Refactor experimental ML CLI and code (#1218)

2021-06-02 20:37:12 -08:00

kbwrap.py

[Bug] CLI Fixes (#1073)

2021-09-10 18:07:10 +00:00

main.py

[Bug] CLI Fixes (#1073)

2021-09-10 18:07:10 +00:00

mappings.py

Add a RuleCollection object instead of a "loader" module (#1063)

2021-04-05 14:23:37 -06:00

misc.py

Allow CLi config to be multiple formats (#1485)

2021-09-16 04:13:51 +00:00

mixins.py

Add test for improper rule demotion (released production -> development) (#1555)

2021-10-20 05:48:26 +00:00

ml.py

Refactor experimental ML CLI and code (#1218)

2021-06-02 20:37:12 -08:00

packaging.py

Add test for improper rule demotion (released production -> development) (#1555)

2021-10-20 05:48:26 +00:00

rule_formatter.py

Update cardinality field in schema for threshold rules (#1349)

2021-07-21 16:33:59 +00:00

rule_loader.py

[Bug] CLI Fixes (#1073)

2021-09-10 18:07:10 +00:00

rule_validators.py

Add min_stack_version to rule metadata (#1173)

2021-06-30 13:26:27 -08:00

rule.py

Add test for improper rule demotion (released production -> development) (#1555)

2021-10-20 05:48:26 +00:00

semver.py

Generate an integrations package from a release (#983)

2021-03-09 13:30:12 -09:00

utils.py

[Bug] CLI Fixes (#1073)

2021-09-10 18:07:10 +00:00

version_lock.py

Add DeprecatedCollection to RuleCollection to bypass validation (#1454)

2021-09-01 23:31:06 +00:00