Releases: chronicle/detection-rules
Exit gracefully if no local content (rules, reference lists, data tables, or rule exclusions are found
Exit gracefully if no local content (rules, reference lists, data tables, or rule exclusions are found
content-manager-v1.0.3
Fixed bug: Convert the rule names to lowercase before checking for duplicate rule names. A DuplicateRuleNameError exception is raised if duplicate rule names are found.
Add support to manage data tables
Add commands to manage data tables in Google SecOps
Fix bug with return if no local rules are found
fix bug with return if no local rules are found PiperOrigin-RevId: 754065403
Refactor rule manager tool as content manager
Refactor rule manager as content manager and reorganize the various commands in preparation of adding support to manage data tables (and other content) via Google SecOps' API.
The original use case for this tool was to manage detection content (rules) via Google SecOps' API. The tool has since evolved to add support for managing other content such as reference lists and rule exclusions (and soon data tables).
This change does the following:
- Renames the rule manager tool to content manager
- Uses
click
to organize the CLIs commands, options, and arguments