Merge pull request #550 from refractionPOINT/lc-proxy-support

LimaCharlie basic support for Proxy rule category.
This commit is contained in:
Florian Roth 2019-12-06 08:20:14 +01:00 committed by GitHub
commit e91a79e707
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -177,6 +177,22 @@ _allFieldMappings = {
keywordField = None,
postOpMapper = None
),
"/proxy/": SigmaLCConfig(
topLevelParams = {
"event": "HTTP_REQUEST",
},
preConditions = None,
fieldMappings = {
"c-uri|contains": "event/URL",
"c-uri": "event/URL",
"URL": "event/URL",
"cs-uri-query": "event/URL",
"cs-uri-stem": "event/URL",
},
isAllStringValues = False,
keywordField = None,
postOpMapper = None
),
}
class LimaCharlieBackend(BaseBackend):