Ross Wolf 8c92ae7348 Add ATT&CK subtechniques to the schema (#337) ...

* Add ATT&CK subtechniques to the schema
* Switch subtechniques to the 7.11 schema
* Make technique still required
* Lint fixes
* Cleanup EQL constant
* Trim more cruft
* Restore EQL for 710

Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>

2020-12-08 14:57:30 -07:00

..

schemas

Add ATT&CK subtechniques to the schema (#337)

2020-12-08 14:57:30 -07:00

__init__.py

Re-organize commands under more specific click groups (#356)

2020-10-07 12:15:33 -08:00

__main__.py

Switch to click.echo() for the banner

2020-06-29 23:58:20 -06:00

attack.py

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00

beats.py

[New Rule] Microsoft 365 Exchange DKIM Signing Configuration Disabled (#578)

2020-12-08 16:38:00 -05:00

devtools.py

[FR] Add experimental ML DGA CLI support (#361)

2020-12-01 22:25:33 -09:00

docs.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00

ecs.py

Refresh beats and ecs schemas and default to use latest to validate (#570)

2020-12-01 13:24:20 -09:00

eswrap.py

[FR] Add experimental ML DGA CLI support (#361)

2020-12-01 22:25:33 -09:00

kbwrap.py

Add test commands to search and survey rule hits (#485)

2020-11-17 13:08:00 -09:00

main.py

Re-organize commands under more specific click groups (#356)

2020-10-07 12:15:33 -08:00

mappings.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00

misc.py

[FR] Add experimental ML DGA CLI support (#361)

2020-12-01 22:25:33 -09:00

packaging.py

[Rule Tuning] Minor Rule Tweaks for 7.10 (#400)

2020-10-22 09:07:04 -04:00

rule_formatter.py

[New Rule] Initial converted EQL rules (#304)

2020-09-30 21:40:55 -08:00

rule_loader.py

[FR] Add experimental ML DGA CLI support (#361)

2020-12-01 22:25:33 -09:00

rule.py

[FR] Add experimental ML DGA CLI support (#361)

2020-12-01 22:25:33 -09:00

semver.py

Fix kibana-diff command (#198)

2020-09-02 12:19:17 -05:00

utils.py

Add test commands to search and survey rule hits (#485)

2020-11-17 13:08:00 -09:00