| .. |
|
ala.py
|
Added:
|
2020-10-06 15:07:52 +03:00 |
|
arcsight.py
|
Added Humio, Crowdstrike, Corelight
|
2020-05-08 13:41:52 +03:00 |
|
base.py
|
Revert additional change in base.py
|
2020-07-23 10:47:22 -04:00 |
|
carbonblack.py
|
fixed various spelling errors all over rules and source code
|
2021-02-24 14:43:13 +00:00 |
|
csharp.py
|
comments for usage
|
2020-04-11 15:47:23 +02:00 |
|
data.py
|
Moved Sysmon schema XML from contrib directory into module
|
2019-03-16 00:59:29 +01:00 |
|
discovery.py
|
Added Humio, Crowdstrike, Corelight
|
2020-05-08 13:41:52 +03:00 |
|
ee-outliers.py
|
Updated author reference in license
|
2020-05-11 11:47:56 +02:00 |
|
elasticsearch.py
|
fixed various spelling errors all over rules and source code
|
2021-02-24 14:43:13 +00:00 |
|
exceptions.py
|
Changed copyright notices accordingly
|
2018-07-24 00:01:16 +02:00 |
|
fireeye-helix.py
|
fixed various spelling errors all over rules and source code
|
2021-02-24 14:43:13 +00:00 |
|
graylog.py
|
Graylog backend now derived from es-qs
|
2019-11-02 22:56:01 +01:00 |
|
humio.py
|
Added:
|
2020-10-06 15:07:52 +03:00 |
|
limacharlie.py
|
fixed various spelling errors all over rules and source code
|
2021-02-24 14:43:13 +00:00 |
|
logiq.py
|
Fixes
|
2020-04-08 23:43:46 +02:00 |
|
logpoint.py
|
Default configurations for backends
|
2019-11-03 23:32:50 +01:00 |
|
mdatp.py
|
Updated fields to align with MS Advanced Threat Hunting Schema. Standardised and sorted fields across schemas.
|
2021-02-04 11:54:29 +00:00 |
|
misc.py
|
Conditional field mapping for null values
|
2019-04-25 23:24:05 +02:00 |
|
mixins.py
|
Using rule ids as Kibana object id
|
2020-01-30 11:30:01 +01:00 |
|
netwitness-epl.py
|
add Regular expression support
|
2020-09-14 22:04:47 +02:00 |
|
netwitness.py
|
Default configurations for backends
|
2019-11-03 23:32:50 +01:00 |
|
powershell.py
|
partial(?) fix of #762
|
2020-05-16 14:51:58 +03:00 |
|
qradar.py
|
Optimizing Qradar query generation in cases where field definitions are missing
|
2021-01-26 15:24:44 +01:00 |
|
qualys.py
|
Default configurations for backends
|
2019-11-03 23:32:50 +01:00 |
|
splunk.py
|
Fixes
|
2020-10-23 15:31:00 +02:00 |
|
sql.py
|
fixed various spelling errors all over rules and source code
|
2021-02-24 14:43:13 +00:00 |
|
sqlite.py
|
Remove unused function
|
2020-05-30 01:57:06 +02:00 |
|
stix.py
|
STIX Support keywords (value without field)
|
2020-07-28 18:52:02 +03:00 |
|
sumologic.py
|
fixed various spelling errors all over rules and source code
|
2021-02-24 14:43:13 +00:00 |
|
sysmon.py
|
Added:
|
2020-10-06 15:07:52 +03:00 |
|
tools.py
|
fixed various spelling errors all over rules and source code
|
2021-02-24 14:43:13 +00:00 |
|
uberagent.py
|
Rules: Support image_load
|
2020-11-11 12:31:55 +01:00 |
