Skip to content

Commit

Permalink
Sigma Rule Supported Modifier Update (2024-10-06 21:10:47) (#734)
Browse files Browse the repository at this point in the history
Co-authored-by: YamatoSecurity <[email protected]>
  • Loading branch information
github-actions[bot] and YamatoSecurity authored Oct 6, 2024
1 parent b83ba8b commit 3c2a557
Showing 1 changed file with 7 additions and 7 deletions.
14 changes: 7 additions & 7 deletions doc/SupportedSigmaFieldModifiers.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,20 +5,20 @@
| base64offsetǀcontains | 7 | 0 |
| cased | 0 | 0 |
| cidr | 34 | 0 |
| contains | 2744 | 21 |
| containsǀall | 977 | 0 |
| contains | 2750 | 21 |
| containsǀall | 976 | 0 |
| containsǀallǀwindash | 4 | 0 |
| containsǀwindash | 76 | 0 |
| endswith | 2905 | 270 |
| containsǀwindash | 78 | 0 |
| endswith | 2907 | 270 |
| endswithfield | 0 | 2 |
| endswithǀwindash | 1 | 0 |
| endswithǀwindash | 2 | 0 |
| equalsfield | 0 | 1 |
| exists | 0 | 0 |
| re | 165 | 11 |
| reǀi | 0 | 0 |
| reǀm | 0 | 0 |
| reǀs | 0 | 0 |
| startswith | 436 | 6 |
| startswith | 438 | 6 |

# Hayabusa unsupported field modifiers
| Field Modifier | Sigma Count | Hayabusa Count |
Expand All @@ -34,5 +34,5 @@
| lt | 0 | 0 |
| lte | 0 | 0 |

Updated: 2024/10/03
Updated: 2024/10/06
Author: Fukusuke Takahashi

0 comments on commit 3c2a557

Please sign in to comment.