SigmaHQ/tools/sigma
sisecbe 2f5eb08b41
Adapt count function when aggfield not present
When no field is present, use "count" , when field is present use "dc(field)". As described in the Sigma specifications.
Splunk throws errors when using "count()" with empy fields. use "count" instead.
2019-02-05 15:44:05 +01:00
..
backends Adapt count function when aggfield not present 2019-02-05 15:44:05 +01:00
config Fixed imports after config split 2018-07-27 23:54:18 +02:00
parser Moved node dumping code to generic location 2018-11-21 23:22:38 +01:00
__init__.py Intermediate refactoring commit: moving code into package 2017-12-08 21:45:05 +01:00
configuration.py Fixed imports after config split 2018-07-27 23:54:18 +02:00
filter.py Added tag filtering to sigmac 2018-09-06 00:57:54 +02:00