Justin Ibarra a0a3143a52 Refresh beats and ecs schemas (#1140) ...

* download new beats and ecs schemas
* add beats download func by version and download v7.11.2

2021-04-22 09:49:06 -08:00

..

beats_schemas

Refresh beats and ecs schemas (#1140)

2021-04-22 09:49:06 -08:00

ecs_schemas

Refresh beats and ecs schemas (#1140)

2021-04-22 09:49:06 -08:00

attack-crosswalk.json

[Rule Tuning] Update ATT&CK threat mappings to reflect changes (#706)

2020-12-18 12:46:16 -09:00

attack-technique-redirects.json

[Rule Tuning] Update ATT&CK threat mappings to reflect changes (#706)

2020-12-18 12:46:16 -09:00

attack-v7.2.json.gz

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00

deprecated_rules.json

Add tests to ensure rules are properly deprecated (#1050)

2021-03-16 21:31:33 -08:00

non-ecs-schema.json

[New Rule] Microsoft 365 Teams Custom Application Interaction Allowed (#657)

2020-12-08 17:36:47 -05:00

packages.yml

Change the asset .type field (#1075)

2021-04-05 10:50:58 -06:00

rule-mapping.yml

[New Rule] AWS EC2 Snapshot Activity

2020-07-07 15:10:06 -06:00

test_toml.json

Add rule loader and dependencies

2020-06-29 23:17:42 -06:00

version.lock.json

Update threshold rule schema to disallow empty field string (#1098)

2021-04-14 04:56:38 -08:00