Justin Ibarra 6177458bd8 Add empty technique array to rules (#828) ...

* [Rule Tuning] Add empty arrays in place of tactic only threat mappings
* dynamically insert empty technique array in payload
* use replace_id as function parameter

2021-01-11 08:58:18 -09:00

..

schemas

Add empty technique array to rules (#828)

2021-01-11 08:58:18 -09:00

__init__.py

Re-organize commands under more specific click groups (#356)

2020-10-07 12:15:33 -08:00

__main__.py

Switch to click.echo() for the banner

2020-06-29 23:58:20 -06:00

attack.py

[Rule Tuning] Update ATT&CK threat mappings to reflect changes (#706)

2020-12-18 12:46:16 -09:00

beats.py

Add support to validate against dev ECS and beats schemas (#691)

2020-12-08 13:29:56 -09:00

devtools.py

[FR] Add experimental ML DGA CLI support (#361)

2020-12-01 22:25:33 -09:00

docs.py

[Rule Tuning] Update ATT&CK threat mappings to reflect changes (#706)

2020-12-18 12:46:16 -09:00

ecs.py

Refresh beats and ecs schemas and default to use latest to validate (#570)

2020-12-01 13:24:20 -09:00

eswrap.py

[Docs] Update ML_DGA.md (#707)

2020-12-09 13:06:35 -09:00

kbwrap.py

Add empty technique array to rules (#828)

2021-01-11 08:58:18 -09:00

main.py

Add empty technique array to rules (#828)

2021-01-11 08:58:18 -09:00

mappings.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00

misc.py

Auth to Kibana connector using an existing cookie (#711)

2020-12-15 13:20:46 -07:00

packaging.py

Add empty technique array to rules (#828)

2021-01-11 08:58:18 -09:00

rule_formatter.py

[New Rule] Initial converted EQL rules (#304)

2020-09-30 21:40:55 -08:00

rule_loader.py

[Bug] Allow duplicative queries across different rule types (#704)

2020-12-08 13:16:59 -09:00

rule.py

Add empty technique array to rules (#828)

2021-01-11 08:58:18 -09:00

semver.py

Fix kibana-diff command (#198)

2020-09-02 12:19:17 -05:00

utils.py

Add test commands to search and survey rule hits (#485)

2020-11-17 13:08:00 -09:00