Isai 63fda01fdd [New Rule] Kubernetes execution_user_exec_to_pod (#1979) ...

* Create execution_user_exec_to_pod.toml

* Update execution_user_exec_to_pod.toml

* Update rules/integrations/kubernetes/execution_user_exec_to_pod.toml

* Update non-ecs-schema.json

* Update execution_user_exec_to_pod.toml

* Update rules/integrations/kubernetes/execution_user_exec_to_pod.toml

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

* Update execution_user_exec_to_pod.toml

* Update execution_user_exec_to_pod.toml

* Update execution_user_exec_to_pod.toml

* toml-linted file and add to false positive

toml-linted the file and added to the false positive description

* Create notepad.sct

Added this back into the repo, deleted by mistake.

* added min_stack_version based on integration

min stack version determined by integration support of necessary fields

Co-authored-by: Jonhnathan <jonhnathancesar@gmail.com>
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>

2022-06-09 17:52:45 -04:00

..

etc

[New Rule] Kubernetes execution_user_exec_to_pod (#1979)

2022-06-09 17:52:45 -04:00

schemas

[Bug] resolves bug in Rule version methods (#2021)

2022-06-07 15:40:46 -08:00

__init__.py

reset evasion rules (#1902)

2022-03-29 15:47:48 -08:00

__main__.py

Move Rule into a dataclass (#1029)

2021-03-24 10:24:32 -06:00

attack.py

Generate ATT&CK navigator layer files and links (#1787)

2022-03-04 08:20:44 -09:00

beats.py

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

cli_utils.py

Add index as a required field to rule_prompt (#1595)

2021-11-14 17:05:42 -09:00

devtools.py

[Bug] Fix test_matrix_to_lock_version_defaults test (#2014)

2022-06-02 16:34:54 -08:00

docs.py

Generate ATT&CK navigator layer files and links (#1787)

2022-03-04 08:20:44 -09:00

ecs.py

Add support for eql-wildcard and kql-match_only_text (#1583)

2021-10-28 08:57:43 -05:00

eswrap.py

Update elasticsearch dependency to 8.1 (#1911)

2022-04-06 11:52:22 -08:00

ghwrap.py

Generate ATT&CK navigator layer files and links (#1787)

2022-03-04 08:20:44 -09:00

kbwrap.py

[Bug] CLI Fixes (#1073)

2021-09-10 10:06:04 -08:00

main.py

[Bug] resolves bug in Rule version methods (#2021)

2022-06-07 15:40:46 -08:00

mappings.py

Add a RuleCollection object instead of a "loader" module (#1063)

2021-04-05 14:23:37 -06:00

misc.py

[Bug] resolves bug in Rule version methods (#2021)

2022-06-07 15:40:46 -08:00

mixins.py

Collapse unsupported previous version entries (#2013)

2022-06-02 15:18:12 -08:00

ml.py

Refactor experimental ML CLI and code (#1218)

2021-06-02 20:37:12 -08:00

navigator.py

Replace * in navigator filenames (#1813)

2022-03-04 08:45:55 -09:00

packaging.py

[Bug] resolves bug in Rule version methods (#2021)

2022-06-07 15:40:46 -08:00

rule_formatter.py

[Bug] Fix toml-lint ordering of Mitre metadata #1249 (#1774)

2022-02-22 13:57:49 -05:00

rule_loader.py

Add delta command to determine changes to endpoint rules between tags (#1943)

2022-05-03 12:30:11 -08:00

rule_validators.py

1554 update eql schemas to fail validation on text fields (#1866)

2022-03-23 16:22:26 -04:00

rule.py

[Bug] resolves bug in Rule version methods (#2021)

2022-06-07 15:40:46 -08:00

semver.py

Prepare for creation of 8.1 branch (#1700)

2022-01-25 18:11:59 -09:00

utils.py

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

version_lock.py

[Bug] resolves bug in Rule version methods (#2021)

2022-06-07 15:40:46 -08:00