Skip to content

Releases: chronicle/detection-rules

Exit gracefully if no local content (rules, reference lists, data tables, or rule exclusions are found

03 Jun 15:44
Compare
Choose a tag to compare

Exit gracefully if no local content (rules, reference lists, data tables, or rule exclusions are found

content-manager-v1.0.3

30 May 12:51
Compare
Choose a tag to compare

Fixed bug: Convert the rule names to lowercase before checking for duplicate rule names. A DuplicateRuleNameError exception is raised if duplicate rule names are found.

Add support to manage data tables

20 May 15:08
Compare
Choose a tag to compare

Add commands to manage data tables in Google SecOps

Fix bug with return if no local rules are found

02 May 18:07
Compare
Choose a tag to compare
fix bug with return if no local rules are found

PiperOrigin-RevId: 754065403

Refactor rule manager tool as content manager

02 May 17:33
Compare
Choose a tag to compare

Refactor rule manager as content manager and reorganize the various commands in preparation of adding support to manage data tables (and other content) via Google SecOps' API.

The original use case for this tool was to manage detection content (rules) via Google SecOps' API. The tool has since evolved to add support for managing other content such as reference lists and rule exclusions (and soon data tables).

This change does the following:

  • Renames the rule manager tool to content manager
  • Uses click to organize the CLIs commands, options, and arguments