Justin Ibarra 065bcd8018 Refresh ATT&CK data to v7.2 and expand threat validation (#330) ...

* refresh to latest ATT&CK 7.2
* add new unit test to further validate threat mappings
* updated threat mappings in rules to reflect changes
* new func to download and refresh mitre data based on version

2020-09-23 22:03:29 -08:00

..

schemas

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00

__init__.py

Add versioned schemas with a downgrade path (#84)

2020-07-23 11:39:35 -06:00

__main__.py

Switch to click.echo() for the banner

2020-06-29 23:58:20 -06:00

attack.py

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00

beats.py

Add EQL rules and schema validation (#297)

2020-09-16 08:36:48 -06:00

ecs.py

Add EQL rules and schema validation (#297)

2020-09-16 08:36:48 -06:00

eswrap.py

Change the way we get environment variables (#280)

2020-09-16 10:23:22 -06:00

main.py

Collect unique query fields per rule (#296)

2020-09-23 14:36:34 -08:00

mappings.py

Add versioned schemas with a downgrade path (#84)

2020-07-23 11:39:35 -06:00

misc.py

Collect unique query fields per rule (#296)

2020-09-23 14:36:34 -08:00

packaging.py

Collect unique query fields per rule (#296)

2020-09-23 14:36:34 -08:00

rule_formatter.py

Merge branch '7.9' into main

2020-08-03 15:20:36 -06:00

rule_loader.py

Add EQL rules and schema validation (#297)

2020-09-16 08:36:48 -06:00

rule.py

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00

semver.py

Fix kibana-diff command (#198)

2020-09-02 12:19:17 -05:00

utils.py

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00