sigma-rules

Files

T

Eric Forte 72ba0b16a9 [Bug] KQL fails validation on uppercase keywords (#3568 )

* add todo

* Add a normalize_kql_keywords function to utils

* update rule loader to normalize and warn

* optimized loading

* fix linting

* Moved conversion to kql module.

* Updated unit test

* Refactor KQL parser to normalize keywords via flag

* Fix logic typo

* Update detection_rules/utils.py

Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>

* Update lib/kql/kql/__init__.py

Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>

* Updated to fix unit tests and remove warnings

* linting typo

* Added comments

* remove unused imports

* Update kql.parse default

---------

Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>
Co-authored-by: Mika Ayenson <Mikaayenson@users.noreply.github.com>

(cherry picked from commit 1566c29bae)

2024-04-04 22:10:57 +00:00

__init__.py

Update License to Elastic v2 (#944 )

2021-03-03 22:12:11 -09:00

test_dsl.py

Update License to Elastic v2 (#944 )

2021-03-03 22:12:11 -09:00

test_eql2kql.py

[eql2kql] fix wildcard bug (#1507 )

2022-04-21 23:44:39 -04:00

test_evaluator.py

[eql2kql] fix wildcard bug (#1507 )