Skip to content

Commit

Permalink
Update to match CuratedSigma artifact changes
Browse files Browse the repository at this point in the history
  • Loading branch information
predictiple committed Apr 26, 2024
1 parent 2ed7aff commit 463a74a
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 8 deletions.
19 changes: 11 additions & 8 deletions docs/content/docs/artifacts/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,17 +31,18 @@ required_permissions:
- SERVER_ADMIN

parameters:
- name: PackageName
type: choices
default: Velociraptor Hayabusa Ruleset
- name: PackageNames
type: multichoice
default: '["Velociraptor Hayabusa Ruleset"]'
choices:
- Velociraptor Hayabusa Ruleset
- Velociraptor Hayabusa Live Detection
- Velociraptor ChopChopGo Ruleset (Linux)
- Velociraptor Curated Windows Ruleset

- name: Prefix
description: Add artifacts with this prefix
default: Sigma.
description: Add this prefix to imported artifacts
validating_regex: '^[a-zA-Z0-9_.]*$'

sources:
- query: |
Expand All @@ -50,7 +51,9 @@ sources:
`Velociraptor Hayabusa Ruleset`="https://sigma.velocidex.com/Velociraptor-Hayabusa-Rules.zip",
`Velociraptor Hayabusa Live Detection`="https://sigma.velocidex.com/Velociraptor-Hayabusa-Monitoring.zip")
SELECT * FROM Artifact.Server.Import.ArtifactExchange(
Prefix=Prefix,
ExchangeURL=get(item= URLlookup, member= PackageName))
SELECT * FROM foreach(row=PackageNames,
query={SELECT * FROM
Artifact.Server.Import.ArtifactExchange(
Prefix=Prefix,
ExchangeURL=get(item= URLlookup, member= _value))})
```
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit 463a74a

Please sign in to comment.