Justin Ibarra a212008f8c [Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)

2020-09-30 09:41:33 -08:00

..

schemas

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00

__init__.py

Add versioned schemas with a downgrade path (#84)

2020-07-23 11:39:35 -06:00

__main__.py

Switch to click.echo() for the banner

2020-06-29 23:58:20 -06:00

attack.py

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00

beats.py

Add EQL rules and schema validation (#297)

2020-09-16 08:36:48 -06:00

ecs.py

Add EQL rules and schema validation (#297)

2020-09-16 08:36:48 -06:00

eswrap.py

[Bug fix] Add missing parenthesis for -kibana-url

2020-09-30 09:32:43 -06:00

main.py

Collect unique query fields per rule (#296)

2020-09-23 14:36:34 -08:00

mappings.py

Add versioned schemas with a downgrade path (#84)

2020-07-23 11:39:35 -06:00

misc.py

Collect unique query fields per rule (#296)

2020-09-23 14:36:34 -08:00

packaging.py

Collect unique query fields per rule (#296)

2020-09-23 14:36:34 -08:00

rule_formatter.py

Merge branch '7.9' into main

2020-08-03 15:20:36 -06:00

rule_loader.py

Add EQL rules and schema validation (#297)

2020-09-16 08:36:48 -06:00

rule.py

[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)

2020-09-30 09:41:33 -08:00

semver.py

Fix kibana-diff command (#198)

2020-09-02 12:19:17 -05:00

utils.py

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00