valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-06 17:35:19 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

es-rule: make risk scores stable

Browse Source 
Don't create unnecessary deltas between runs.
This commit is contained in:
Joshua Roys 2021-03-01 10:13:34 -05:00
parent a08571be91
commit 92fcc314bf
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
tools/sigma/backends/elasticsearch.py
View File

@ -1283,13 +1283,13 @@ class ElasticSearchRuleBackend(ElasticsearchQuerystringBackend):
def map_risk_score(self, level):
if level == "low":
return randrange(0,22)
return 5
elif level == "medium":
return randrange(22,48)
return 35
elif level == "high":
return randrange(48,74)
return 65
elif level == "critical":
return randrange(74,101)
return 95
def create_rule(self, configs, index):
tags = configs.get("tags", [])