f0085f2116
reduce FPs
2020-07-03 14:30:33 +02:00
25f1157db0
Change characteristic syntax in rules
...
Get rid of `true` in characteristic as it is implicit.
The changes are the result of executing the following commands:
```
find . -type f -exec sed -i.bak "s/\(.*\)characteristic(\(.*\)): true/\1characteristic: \2/g" {} \;
find . -name "*.bak" -type f -delete
```
2020-07-01 19:19:49 +02:00
e5db226844
fix rule reference
2020-06-29 12:26:09 -06:00
531eda1074
Fix 'unusual meta field' rule linter failure
...
Change the field `note` by a comment to fix the following failure:
```
FAIL: unusual meta field: Remove the meta field: "note"
```
2020-06-29 22:56:32 +02:00
54cfb05bd0
rules: address comments in #14
2020-06-26 17:45:56 -06:00
7b4f4d10fb
rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better
2020-06-21 17:54:01 -06:00
5f57dbdbc9
rules: reorganize rule names, namespaces, and ATT&CK mappings
2020-06-21 17:25:43 -06:00
7f5fb71a5d
rules: use meta.references over meta.reference
...
closes #13
2020-06-21 16:41:18 -06:00
e9ad899b0f
rules: add trailing newline to end of each file
2020-06-21 15:50:42 -06:00
69507875b0
rules: reformat all rules using capafmt
2020-06-21 15:47:02 -06:00
19c9f180e1
limit to one nzxor
2020-06-24 16:06:51 +02:00
eaae0e89a7
import existing rules, forgetting about 938 prior commits
2020-06-18 07:27:35 -06:00
Moritz Raabe