10 Commits

Author	SHA1	Message	Date
William Ballenthin	b878effef7	fix rules as documented in #49	2020-07-24 15:49:52 -06:00
Moritz Raabe	a8621978cf	change tight loop scope to function	2020-07-06 12:36:21 +02:00
Ana María Martínez Gómez	25f1157db0	Change characteristic syntax in rules ... Get rid of `true` in characteristic as it is implicit. The changes are the result of executing the following commands: ``` find . -type f -exec sed -i.bak "s/\(.*\)characteristic(\(.*\)): true/\1characteristic: \2/g" {} \; find . -name "*.bak" -type f -delete ```	2020-07-01 19:19:49 +02:00
William Ballenthin	973cb6b1d2	lib rules: remove namespaces	2020-06-29 06:14:59 -06:00
William Ballenthin	54cfb05bd0	rules: address comments in #14	2020-06-26 17:45:56 -06:00
William Ballenthin	5f57dbdbc9	rules: reorganize rule names, namespaces, and ATT&CK mappings	2020-06-21 17:25:43 -06:00
William Ballenthin	c80380b8d6	rules: reformat with consistent lib and references order	2020-06-21 16:26:28 -06:00
William Ballenthin	e9ad899b0f	rules: add trailing newline to end of each file	2020-06-21 15:50:42 -06:00
William Ballenthin	69507875b0	rules: reformat all rules using capafmt	2020-06-21 15:47:02 -06:00
William Ballenthin	eaae0e89a7	import existing rules, forgetting about 938 prior commits	2020-06-18 07:27:35 -06:00