Feature/addruletype to sigma rule#230 (#235)

* added ruletype to SIGMA rule #230

* added ruletype to SIGMA rule converter tool #231

rules/sigma/malware/av_exploiting.yml

@@ -39,3 +39,4 @@ tags:
 - attack.t1203
 - attack.command_and_control
 - attack.t1219
+ruletype: SIGMA

rules/sigma/malware/av_hacktool.yml

@@ -30,3 +30,4 @@ status: experimental
 tags:
 - attack.execution
 - attack.t1204
+ruletype: SIGMA

rules/sigma/malware/av_password_dumper.yml

@@ -39,3 +39,4 @@ tags:
 - attack.t1558
 - attack.t1003.001
 - attack.t1003.002
+ruletype: SIGMA

rules/sigma/malware/av_printernightmare_cve_2021_34527.yml

@@ -27,3 +27,4 @@ status: stable
 tags:
 - attack.privilege_escalation
 - attack.t1055
+ruletype: SIGMA

rules/sigma/malware/av_relevant_files.yml

@@ -79,3 +79,4 @@ status: experimental
 tags:
 - attack.resource_development
 - attack.t1588
+ruletype: SIGMA

rules/sigma/malware/av_webshell.yml

@@ -77,3 +77,4 @@ tags:
 - attack.persistence
 - attack.t1100
 - attack.t1505.003
+ruletype: SIGMA

rules/sigma/malware/file_event_mal_octopus_scanner.yml

@@ -24,3 +24,4 @@ status: experimental
 tags:
 - attack.t1195
 - attack.t1195.001
+ruletype: SIGMA

rules/sigma/malware/process_creation_mal_blue_mockingbird.yml

@@ -36,3 +36,4 @@ tags:
 - attack.execution
 - attack.t1112
 - attack.t1047
+ruletype: SIGMA

rules/sigma/malware/process_creation_mal_darkside_ransomware.yml

@@ -33,3 +33,4 @@ status: experimental
 tags:
 - attack.execution
 - attack.t1204
+ruletype: SIGMA

rules/sigma/malware/process_creation_mal_lockergoga_ransomware.yml

@@ -24,3 +24,4 @@ status: experimental
 tags:
 - attack.impact
 - attack.t1486
+ruletype: SIGMA

rules/sigma/malware/process_creation_mal_ryuk.yml

@@ -31,3 +31,4 @@ status: experimental
 tags:
 - attack.execution
 - attack.t1204
+ruletype: SIGMA

rules/sigma/malware/registry_event_mal_azorult.yml

@@ -37,3 +37,4 @@ status: experimental
 tags:
 - attack.execution
 - attack.t1112
+ruletype: SIGMA

rules/sigma/malware/registry_event_mal_blue_mockingbird.yml

@@ -31,3 +31,4 @@ tags:
 - attack.execution
 - attack.t1112
 - attack.t1047
+ruletype: SIGMA

rules/sigma/malware/registry_event_mal_flowcloud.yml

@@ -33,3 +33,4 @@ status: experimental
 tags:
 - attack.persistence
 - attack.t1112
+ruletype: SIGMA

rules/sigma/malware/registry_event_mal_netwire.yml

@@ -35,3 +35,4 @@ status: experimental
 tags:
 - attack.defense_evasion
 - attack.t1112
+ruletype: SIGMA

rules/sigma/malware/registry_event_mal_ursnif.yml

@@ -35,3 +35,4 @@ status: experimental
 tags:
 - attack.execution
 - attack.t1112
+ruletype: SIGMA