Skip to content

Tags: bradleyjkemp/sigma-go

Tags

v0.6.6

Toggle v0.6.6's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Implement more efficient batch rule evaluator (#45)

* mvp

* Fuzz, move to new, correct library

* Use same technique for regexes

* cleanup

* dedupe matching logic

v0.6.5

Toggle v0.6.5's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Add JSON struct tags (#39)

v0.6.4

Toggle v0.6.4's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Add option to disable case insensitivity (#36)

* Add case sensitive option

* undo formatting

v0.6.3

Toggle v0.6.3's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Migrate modifiers to an exported interface (#35)

v0.6.2

Toggle v0.6.2's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Expose position information for key rule parts (#34)

* Expose raw yaml.Node for certain rule fields

* Only expose line+column

* Implement custom inlining

* Include Search nodes even in config files

v0.6.1

Toggle v0.6.1's commit message
Don't print values if they're already string-like

v0.6.0

Toggle v0.6.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Implement numeric comparison modifiers (>, >=, <, <=) (#32)

* Add type coercion helper

* Add testcase

* Refactor, add remaining comparators

* Move test up one layer of implementation detail

v0.5.1

Toggle v0.5.1's commit message
Update gopkg.in/yaml.v3

v0.5.0

Toggle v0.5.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Parse the Rule's 'related' keyword as slice of maps (#28)

* Parse the Rule's 'related' keyword as slice of maps

Rules with related keyword fail to parse currently.  This should fix it.

* Use struct type for related rules

Co-authored-by: Bradley Kemp <bradley@bradleyjkemp.dev>

v0.4.2

Toggle v0.4.2's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Fix bug in unhandled JSONPath error (#27)

* Gracefully handle JSONPath failures where fields do not exist

* Add testcase