From bae09e9447100a8313201ca39c48284b17ef68eb Mon Sep 17 00:00:00 2001 From: Thomas Patzke Date: Tue, 25 Aug 2020 23:58:04 +0200 Subject: [PATCH] Sigmatools release 0.18.1 --- CHANGELOG.md | 31 +++++++++++++++++++++++++++++++ tools/LONG_DESCRIPTION.md | 10 ++++++++++ tools/setup.py | 4 ++-- 3 files changed, 43 insertions(+), 2 deletions(-) create mode 100644 tools/LONG_DESCRIPTION.md diff --git a/CHANGELOG.md b/CHANGELOG.md index 1c170825..a7c913f5 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,37 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html) from version 0.14.0. +## 0.18.1 - 2020-08-25 + +Release created for technical reasons (issues with extended README and PyPI), no real changes done. + +## 0.18.0 - 2020-08-25 + +### Added + +* C# backend +* STIX backend +* Options to xpack-watcher backend (action_throttle_period, mail_from acaw, mail_profile and other) +* More generic log sources +* Windows Defender log sources +* Generic DNS query log source +* AppLocker log source + +### Changed + +* Improved backend and configuration descriptions +* Microsoft Defender ATP mapping updated +* Improved handling of wildcards in Elastic backends + +### Fixed + +* Powershell backend: key name was incorrectly added into regular expression +* Grouping issue in Carbon Black backend +* Handling of default field mapping in case field is referenced multiple from a rule +* Code cleanup and various fixes +* Log source mappings in configurations +* Handling of conditional field mappings by Elastic backends + ## 0.17.0 - 2020-06-12 ### Added diff --git a/tools/LONG_DESCRIPTION.md b/tools/LONG_DESCRIPTION.md new file mode 100644 index 00000000..990e105c --- /dev/null +++ b/tools/LONG_DESCRIPTION.md @@ -0,0 +1,10 @@ +# Sigma Tools + +This package contains the following tools for [Sigma](https://github.com/Neo23x0/sigma): + +* sigmac: the Sigma converter +* merge_sigma: Merge a Sigma collection into a minimal set of Sigma rules +* sigma2misp: Import Sigma rules into MISP +* sigma2attack: Create a MITRE ATT&CK coverage map +* sigma_similarity: Measure similarity of Sigma rules +* sigma_uuid: Check Sigma identifiers diff --git a/tools/setup.py b/tools/setup.py index 2fe63655..ff92b4a6 100644 --- a/tools/setup.py +++ b/tools/setup.py @@ -9,12 +9,12 @@ from pathlib import Path here = path.abspath(path.dirname(__file__)) # Get the long description from the README file -with open(path.join(here, 'README.md'), encoding='utf-8') as f: +with open(path.join(here, 'LONG_DESCRIPTION.md'), encoding='utf-8') as f: long_description = f.read() setup( name='sigmatools', - version='0.17.0', + version='0.18.1', description='Tools for the Generic Signature Format for SIEM Systems', long_description=long_description, long_description_content_type="text/markdown",