github SigmaHQ/sigma 0.13
Sigma tool release 0.13

latest releases: r2024-03-26, r2024-03-11, r2024-02-26...
4 years ago

Added

  • Index mappings for Sumologic
  • Malicious cmdlets in wdatp
  • QRadar support for keyword searches
  • QRadar mapping improvements
  • QRadar field selection
  • QRadar type regex modifier support
  • Elasticsearch keyword field blacklisting with wildcards
  • Added dateField configuration parameter in xpack-watcher backend
  • Field mappings in configurations
  • Field name mapping for conditional fields
  • Value modifiers:
    • utf16
    • utf16le
    • wide
    • utf16be

Changed

  • Improved --backend-config help text

Fixed

  • Backend errors in ala
  • Slash escaping within es-dsl wildcard queries
  • QRadar backend config
  • QRadar field name and value escaping and handling
  • Elasticsearch wildcard detection pattern
  • Aggregation on keyword field in es-dsl backend

Don't miss a new sigma release

NewReleases is sending notifications on new releases.