Skip to content

Releases: chronicle/detection-rules

initialize default directories and files in main and when tests are executed

10 Jun 16:08
Compare
Choose a tag to compare

initialize default directories and files in main and when tests are executed

Move creation of initial files and directories from __main__ to __init__

09 Jun 15:52
Compare
Choose a tag to compare

Move creation of initial files and directories from main to init

Exit gracefully if no local content (rules, reference lists, data tables, or rule exclusions are found

03 Jun 15:44
Compare
Choose a tag to compare

Exit gracefully if no local content (rules, reference lists, data tables, or rule exclusions are found

content-manager-v1.0.3

30 May 12:51
Compare
Choose a tag to compare

Fixed bug: Convert the rule names to lowercase before checking for duplicate rule names. A DuplicateRuleNameError exception is raised if duplicate rule names are found.

Add support to manage data tables

20 May 15:08
Compare
Choose a tag to compare

Add commands to manage data tables in Google SecOps

Fix bug with return if no local rules are found

02 May 18:07
Compare
Choose a tag to compare
fix bug with return if no local rules are found

PiperOrigin-RevId: 754065403

Refactor rule manager tool as content manager

02 May 17:33
Compare
Choose a tag to compare

Refactor rule manager as content manager and reorganize the various commands in preparation of adding support to manage data tables (and other content) via Google SecOps' API.

The original use case for this tool was to manage detection content (rules) via Google SecOps' API. The tool has since evolved to add support for managing other content such as reference lists and rule exclusions (and soon data tables).

This change does the following:

  • Renames the rule manager tool to content manager
  • Uses click to organize the CLIs commands, options, and arguments