6fd0f7724f
selectively lowercase eval'd fields
2023-10-05 16:50:34 -05:00
f512d5dab8
convert sigma values to lowercase
2023-10-05 08:16:26 -07:00
c668947873
Add lower to evals
2023-10-04 18:06:19 -05:00
a23eb85f4f
Removed printout from python code. Committed detection in dist with status validation.
2023-10-02 16:45:06 -07:00
95f836d4f6
Support for 'status: validation' to be used ONLY for BA Detections. If this is used with a non-ba detection, an exception will be generated.
2023-10-02 16:42:39 -07:00
90e2bc27ee
merged with develop
2023-09-18 08:50:10 +02:00
5c8f2f2cba
Branch was auto-updated.
2023-08-28 12:46:13 -07:00
58cae8864b
add status field to ba detections package
2023-08-28 11:47:43 +02:00
391cded0c7
Flax Typhoon
2023-08-25 09:30:30 -06:00
fcb174d163
bug fix
2023-08-18 13:34:14 +02:00
2b77ace7e0
code change
2023-08-17 10:10:32 -05:00
da3d925adf
converted detections to SPL2
2023-08-09 14:11:24 +02:00
01aec84d9a
converted detections to SPL2
2023-08-09 11:42:41 +02:00
9533c55d93
converted detections to SPL2
2023-08-08 16:00:23 +02:00
1b26692ee2
converted detections to SPL2
2023-08-08 14:54:08 +02:00
7ad6a04f8f
Branch was auto-updated.
2023-07-11 13:03:14 -07:00
1243ee3e59
Update error message to be more descriptive for newline validation.
2023-07-11 12:57:22 -07:00
7ade494863
check for howto
2023-07-11 14:16:33 -05:00
45a8f0a5ee
Branch was auto-updated.
2023-07-11 12:12:54 -07:00
ab3e9f046b
Branch was auto-updated.
2023-07-11 12:12:44 -07:00
0c4fb1601d
API Output Improvements
2023-06-29 14:44:33 +02:00
a9dc524ad9
Make changes to lookup validation to
...
ensure that the structure of .csv files,
along with their quoting and number of
fields, is correct.
2023-06-27 12:07:55 -07:00
76fa47ef07
Branch was auto-updated.
2023-06-23 10:46:03 -07:00
bcee80029d
new line check
2023-06-22 16:26:43 -07:00
346dfc937e
Branch was auto-updated.
2023-06-22 15:00:29 -07:00
e66f6bcf44
variable consistency
2023-06-22 13:37:02 -07:00
ec0770604e
Add content changer
2023-06-20 18:56:36 +02:00
1bd0e39148
updated code to building filter macros
2023-06-14 14:34:12 -07:00
6c6ff98517
Branch was auto-updated.
2023-06-05 09:51:01 -07:00
e282f28135
Add support for apple silicon
...
to docker testing container
2023-05-31 13:44:53 -07:00
cefd9349b1
Ensure that each lookup contains
...
either a filename or a collection
field defined in its yml. Make sure
that is a filename is declared, then
that file actually exists in the
lookups folder. Make sure that
every csv declared in the
lookups folder is actually
used by at least one lookup.
If it is not, then print a
warning but do not cause
a failure.
2023-05-26 16:27:31 -07:00
30ad4d6eab
only kvstore conversion
2023-05-22 17:35:13 -07:00
b24394affd
Push a new github_actions test config file
2023-05-15 13:54:53 -07:00
4b04df1ff8
Updated all app baselines in validate_args
2023-05-15 13:52:12 -07:00
9e535bb5f0
Update baseline to include
...
suricata ta. TA required
for testing new detections.
Also, remove some
duplicates apps from the
baseline.
2023-05-15 12:49:18 -07:00
6c35f820ca
Branch was auto-updated.
2023-05-08 08:36:30 -07:00
92d73aae24
improvements srs detections
2023-05-08 15:34:46 +02:00
43180a41bd
bug fix srs detections
2023-05-08 10:56:12 +02:00
b954ccf537
Branch was auto-updated.
2023-05-02 15:02:44 -07:00
e51757ca9f
conflicts
2023-05-02 14:56:38 -07:00
72792fc2a0
Update to detection tags validator
2023-04-28 14:49:00 +02:00
97a1ec3bd5
bug fix validation
2023-04-28 13:53:52 +02:00
29c841b945
adding a field
2023-04-25 13:30:37 -07:00
932b49ccfd
fixes to validate
2023-04-17 16:06:37 -07:00
fc34672ca4
updates to ymls
2023-04-17 15:23:53 -07:00
4a9ce12739
adding risk=other to all configs
2023-04-17 15:00:26 -07:00
3754611943
Fix a number of experimental and
...
deprecated detections so that
they do not raise error when run
out of the box.
2023-04-11 16:27:40 -07:00
66eb63e06c
Fixing how smoketest is passed
...
to detection wrapper
2023-04-11 12:49:49 -07:00
94a7845f9c
Add experimental support for smoketest.
...
That means running all detections
without replaying data or checking
correctness.
2023-04-11 12:48:49 -07:00
6c0b883df8
update reporting
2023-04-05 14:53:09 +02:00
ljstella