v0.1.4

What's Changed

• Fix for backend & pipeline crash with recent pySigma versions by @jgubler in #16

Full Changelog: v0.1.3...v0.1.4

v0.1.3

What's Changed

• Update poetry dependencies by @frack113 in #9
• Fix Integrity Level Translations by @7RedViolin in #10
• Add Support for Datasets and Presets by @7RedViolin in #13
• Update Field Mappings by @7RedViolin in #14

New Contributors

• @frack113 made their first contribution in #9

Full Changelog: v0.1.2...v0.1.3

v0.1.2

What's Changed

• Update dependencies to support pySigma 0.10.X by @7RedViolin in #7

Full Changelog: v0.1.1...v0.1.2

v0.1.1

What's Changed

• Fix Numbers Incorrectly Cast as Strings by @7RedViolin in #2

New Contributors

• @7RedViolin made their first contribution in #2

Full Changelog: v0.1.0...v0.1.1

Initial Release

General

First release of pysigma-backend-cortexxdr.

Backend

• Output formats include plaintext and JSON (includes query and rule metadata)
• Uses Cortex XDR XQL syntax

Pipelines

• Supports linux, windows, and macos product types
• Supports the following category types for field mappings
  • process_creation
  • file_event
  • file_change
  • file_rename
  • file_delete
  • image_load
  • registry_add
  • registry_delete
  • registry_event
  • registry_set
  • network_connection
  • firewall
    Any unsupported fields or categories will throw errors