Feature/addruletype to sigma rule#230 (#235)

* added ruletype to SIGMA rule #230 * added ruletype to SIGMA rule converter tool #231
2021-11-28 18:14:51 +09:00
parent bc230f7cd5
commit 0cfa806baf
1087 changed files with 1186 additions and 90 deletions
--- a/rules/sigma/process_creation/win_susp_script_execution.yml
+++ b/rules/sigma/process_creation/win_susp_script_execution.yml
@@ -35,3 +35,4 @@ tags:
 - attack.t1059.005
 - attack.t1059.007
 - attack.t1064
+ruletype: SIGMA