mirror of
https://github.com/valitydev/SigmaHQ.git
synced 2024-11-08 02:08:54 +00:00
Merge pull request #550 from refractionPOINT/lc-proxy-support
LimaCharlie basic support for Proxy rule category.
This commit is contained in:
commit
e91a79e707
@ -177,6 +177,22 @@ _allFieldMappings = {
|
||||
keywordField = None,
|
||||
postOpMapper = None
|
||||
),
|
||||
"/proxy/": SigmaLCConfig(
|
||||
topLevelParams = {
|
||||
"event": "HTTP_REQUEST",
|
||||
},
|
||||
preConditions = None,
|
||||
fieldMappings = {
|
||||
"c-uri|contains": "event/URL",
|
||||
"c-uri": "event/URL",
|
||||
"URL": "event/URL",
|
||||
"cs-uri-query": "event/URL",
|
||||
"cs-uri-stem": "event/URL",
|
||||
},
|
||||
isAllStringValues = False,
|
||||
keywordField = None,
|
||||
postOpMapper = None
|
||||
),
|
||||
}
|
||||
|
||||
class LimaCharlieBackend(BaseBackend):
|
||||
|
Loading…
Reference in New Issue
Block a user