Commit Graph

17 Commits

Author SHA1 Message Date
wagga40
f7d116a472 Add a sigma2CSV tool to convert rules to CSV for stats purpose #1787 2021-08-07 10:32:12 +02:00
jaegeral
e1f43f17c2 fixed various spelling errors all over rules and source code 2021-02-24 14:43:13 +00:00
Thomas Patzke
4309082d6b
Merge pull request #818 from cclauss/patch-1
Undefined name: parser_print_help() --> parser.print_help()
2020-06-28 00:34:27 +02:00
Christian Clauss
3fdb355f2b
Undefined name: parser_print_help() --> parser.print_help()
Discovered in #378 
https://docs.python.org/3.8/library/argparse.html#argparse.ArgumentParser.print_help
2020-06-08 13:49:44 +02:00
Florian Roth
6aba430de6 fix: sigma_uuid occurances 2020-03-31 16:29:58 +02:00
Thomas Patzke
d16175fe35 Added id diff filter script 2019-11-12 23:05:27 +01:00
Thomas Patzke
377872c91e Merge branch 'devel-sumo' of https://github.com/juju4/sigma into juju4-devel-sumo 2019-06-28 23:39:15 +02:00
cclauss
2cbefb208b
Use print() function in both Python 2 and Python 3
Legacy __print__ statements are syntax errors in Python 3 but __print()__ function works as expected in both Python 2 and Python 3.

[flake8](http://flake8.pycqa.org) testing of https://github.com/Neo23x0/sigma on Python 3.7.1

$ __flake8 . --count --select=E9,F63,F72,F82 --show-source --statistics__
```
./contrib/sigma2sumologic.py:123:5: F821 undefined name 'parser_print_help'
    parser_print_help()
    ^
./contrib/sigma2sumologic.py:211:32: F821 undefined name 'r'
            f.write(json.dumps(r, indent=4, sort_keys=True) + " ERROR: %s\n\nQUERY: %s" % (e, sumo_query))
                               ^
./contrib/sigma2elastalert.py:165:32: E999 SyntaxError: invalid syntax
        print "Converting file " + file
                               ^
./tools/sigma/parser/collection.py:52:27: F821 undefined name 'SigmaCollectionParseError'
                    raise SigmaCollectionParseError("action 'repeat' is only applicable after first valid Sigma rule")
                          ^
1     E999 SyntaxError: invalid syntax
3     F821 undefined name 'parser_print_help'
4
```
__E901,E999,F821,F822,F823__ are the "_showstopper_" [flake8](http://flake8.pycqa.org) issues that can halt the runtime with a SyntaxError, NameError, etc. These 5 are different from most other flake8 issues which are merely "style violations" -- useful for readability but they do not effect runtime safety.
* F821: undefined name `name`
* F822: undefined name `name` in `__all__`
* F823: local variable name referenced before assignment
* E901: SyntaxError or IndentationError
* E999: SyntaxError -- failed to compile a file into an Abstract Syntax Tree
2019-06-26 14:44:09 +02:00
juju4
059957138d pycodestyle review, openpyxl, error at query generation=continue 2019-06-22 16:18:17 -04:00
Thomas Patzke
2dda9a7b77 Moved Sysmon schema XML from contrib directory into module 2019-03-16 00:59:29 +01:00
tuckner
2c0cc87ab8 Added schema file checking 2019-03-04 11:57:30 -06:00
tuckner
cf186387af Added schema file checking 2019-03-04 11:53:51 -06:00
tuckner
8179d182c4 added azure log analytics 2019-03-04 10:44:45 -06:00
juju4
98a18fd4a2 add sigma2sumologic.py as test/example script 2019-02-03 12:54:03 -05:00
Nicolas Bareil
6728a5ccaa
use yaml.safe_load() 2018-07-24 11:14:01 +02:00
Florian Roth
b9102d0b0a Improved sigma2elastalert 2018-03-05 12:05:47 +01:00
Thomas Patzke
17e8f06161 Added notice regarding contributed tools 2018-03-04 23:26:38 +01:00