Skip to content

pySigma 0.8.0

Compare
Choose a tag to compare
@thomaspatzke thomaspatzke released this 10 Aug 22:36
· 879 commits to main since this release
  • Added field name processing conditions that are also applied to the Sigma rule field name list.
  • Breaking change: IncludeFieldCondition and ExcludeFieldCondition are now field name conditions and have to be moved from the detection_item_conditions to the new field_name_conditions list of a processing item.
  • Tracking of applied processing items on field names. Added FieldNameProcessingItemAppliedCondition field name condition that checks if a processing item was applied to a field name.