Justin Ibarra a575cf9ff3 [Rule Tuning] Use cidrMatch for eql rules checking multiple IPs (#431)

2020-10-29 11:06:24 -08:00

..

schemas

[New Rule] Initial converted EQL rules (#304)

2020-09-30 21:40:55 -08:00

__init__.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00

__main__.py

Switch to click.echo() for the banner

2020-06-29 23:58:20 -06:00

attack.py

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00

beats.py

Add EQL rules and schema validation (#297)

2020-09-16 08:36:48 -06:00

docs.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00

ecs.py

[New Rule] Initial converted EQL rules (#304)

2020-09-30 21:40:55 -08:00

eswrap.py

[Bug fix] Add missing parenthesis for -kibana-url

2020-09-30 09:32:43 -06:00

main.py

Collect unique query fields per rule (#296)

2020-09-23 14:36:34 -08:00

mappings.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00

misc.py

Collect unique query fields per rule (#296)

2020-09-23 14:36:34 -08:00

packaging.py

[Rule Tuning] Minor Rule Tweaks for 7.10 (#400)

2020-10-22 09:07:04 -04:00

rule_formatter.py

[New Rule] Initial converted EQL rules (#304)

2020-09-30 21:40:55 -08:00

rule_loader.py

Add EQL rules and schema validation (#297)

2020-09-16 08:36:48 -06:00

rule.py

[Rule Tuning] Use cidrMatch for eql rules checking multiple IPs (#431)

2020-10-29 11:06:24 -08:00

semver.py

Fix kibana-diff command (#198)

2020-09-02 12:19:17 -05:00

utils.py

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00