Feature/addruletype to sigma rule#230 (#235)

* added ruletype to SIGMA rule #230 * added ruletype to SIGMA rule converter tool #231
2021-11-28 18:14:51 +09:00
parent bc230f7cd5
commit 0cfa806baf
1087 changed files with 1186 additions and 90 deletions
--- a/rules/sigma/file_delete/sysmon_delete_prefetch.yml
+++ b/rules/sigma/file_delete/sysmon_delete_prefetch.yml
@@ -29,3 +29,4 @@ status: experimental
 tags:
 - attack.defense_evasion
 - attack.t1070.004
+ruletype: SIGMA
--- a/rules/sigma/file_delete/sysmon_sysinternals_sdelete_file_deletion.yml
+++ b/rules/sigma/file_delete/sysmon_sysinternals_sdelete_file_deletion.yml
@@ -28,3 +28,4 @@ status: experimental
 tags:
 - attack.defense_evasion
 - attack.t1070.004
+ruletype: SIGMA
--- a/rules/sigma/file_delete/win_cve_2021_1675_printspooler_del.yml
+++ b/rules/sigma/file_delete/win_cve_2021_1675_printspooler_del.yml
@@ -31,3 +31,4 @@ tags:
 - attack.privilege_escalation
 - attack.t1574
 - cve.2021.1675
+ruletype: SIGMA