@oneuptime/common 13.0.7 → 13.0.8

package/build/dist/Utils/SecurityEvent/GoogleSecOpsAlertNormalizer.js

@@ -22,7 +22,10 @@ import { buildObservables, contentHashEventUid, flattenPayload, parseEventTime,
  * metadata; the others still have an id, timestamps, tags and (for SOAR)
  * the originating system, which is enough for a finding row.
  */
-const DETECTION_FINDING_CLASS_UID = 2004;
+export const DETECTION_FINDING_CLASS_UID = 2004;
+// The source every row this normalizer writes is attributed to.
+export const GOOGLE_SECOPS_VENDOR_NAME = "Google";
+export const GOOGLE_SECOPS_PRODUCT_NAME = "Google SecOps";
 /*
  * How many sample events to mine for observables. Detections can carry
  * hundreds of matched events; a handful is enough to identify the
@@ -42,6 +45,20 @@ const COLLECTION_TYPES = [
     "MACHINE_INTELLIGENCE_ALERT",
     "SOAR_ALERT",
 ];
+/*
+ * Google's recommended risk_score ranges for custom detections, highest
+ * band first (https://docs.cloud.google.com/chronicle/docs/yara-l/outcome-syntax):
+ * 90-100 critical, 80-89 high, 50-79 medium, 20-49 low, 1-19 observations.
+ * A score grades into the first band whose minimum it reaches; a score of
+ * zero or less grades nothing.
+ */
+export const GOOGLE_SECOPS_RISK_SCORE_BANDS = [
+    { minimum: 90, severity: OcsfSeverity.Critical },
+    { minimum: 80, severity: OcsfSeverity.High },
+    { minimum: 50, severity: OcsfSeverity.Medium },
+    { minimum: 20, severity: OcsfSeverity.Low },
+    { minimum: 0, severity: OcsfSeverity.Informational },
+];
 function collectSampleEvents(payload) {
     var _a;
     const events = [];
@@ -86,6 +103,108 @@ function readDetectionEntry(payload) {
     }
     return null;
 }
+/*
+ * Every value stored under one key of a Google key/value list. ruleLabels
+ * and outcomes both arrive as [{ key, value }]; a plain object map is
+ * accepted too, the shape a hand-built webhook body may use. Keys compare
+ * trimmed and case-insensitively because YARA-L meta keys are free text.
+ */
+function readKeyedValues(list, key) {
+    const wanted = key.toLowerCase();
+    const values = [];
+    if (Array.isArray(list)) {
+        for (const entry of list) {
+            if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+                continue;
+            }
+            const entryKey = entry["key"];
+            if (typeof entryKey === "string" &&
+                entryKey.trim().toLowerCase() === wanted) {
+                values.push(entry["value"]);
+            }
+        }
+        return values;
+    }
+    if (list && typeof list === "object") {
+        for (const entryKey of Object.keys(list)) {
+            if (entryKey.trim().toLowerCase() === wanted) {
+                values.push(list[entryKey]);
+            }
+        }
+    }
+    return values;
+}
+/*
+ * A severity only when the text names one. "Unknown" is the absence of a
+ * grade, not a grade, so it does not stop the search for a real one.
+ */
+function gradeSeverityText(value) {
+    if (typeof value !== "string" && typeof value !== "number") {
+        return null;
+    }
+    const severity = normalizeOcsfSeverity(String(value));
+    return severity === OcsfSeverity.Unknown ? null : severity;
+}
+function gradeRiskScore(value) {
+    let score = Number.NaN;
+    if (typeof value === "number") {
+        score = value;
+    }
+    else if (typeof value === "string" && value.trim() !== "") {
+        score = Number(value);
+    }
+    if (!Number.isFinite(score) || score <= 0) {
+        return null;
+    }
+    for (const band of GOOGLE_SECOPS_RISK_SCORE_BANDS) {
+        if (score >= band.minimum) {
+            return band.severity;
+        }
+    }
+    return null;
+}
+function firstGrade(values, grade) {
+    for (const value of values) {
+        const severity = grade(value);
+        if (severity) {
+            return severity;
+        }
+    }
+    return null;
+}
+/*
+ * Where a detection's severity lives depends on who wrote the rule.
+ *
+ *   1. detection[].severity — Google grades its own curated rules (Applied
+ *      Threat Intelligence, the curated rule sets) here.
+ *   2. The Collection's own severity — SOAR alerts and webhook bodies.
+ *   3. detection[].ruleLabels "severity" — a custom YARA-L rule's
+ *      `meta: severity = "High"`. Google leaves detection[].severity empty
+ *      for these and returns the meta section as ruleLabels; it is the value
+ *      the SecOps rules dashboard shows as the rule's severity.
+ *   4. detection[].outcomes "risk_score" — a rule that sets no severity but
+ *      scores its detections with $risk_score, graded with Google's
+ *      published bands. Only the outcome counts: the bare riskScore field
+ *      is filled with a default (40 when alerting, 15 when not) for rules
+ *      that set no score, and grading that would invent a severity.
+ *
+ * The first two are the only places read before, and they are read first,
+ * so a detection that already graded grades exactly as it did.
+ */
+function resolveSeverity(payload, detection) {
+    var _a;
+    const ruleLabels = detection
+        ? (_a = readValue(detection, "ruleLabels")) !== null && _a !== void 0 ? _a : readValue(detection, "rule_labels")
+        : null;
+    const outcomes = detection
+        ? readValue(detection, "outcomes")
+        : null;
+    return ((detection && gradeSeverityText(readString(detection, "severity"))) ||
+        gradeSeverityText(readString(payload, "severity")) ||
+        firstGrade(readKeyedValues(ruleLabels, "severity"), gradeSeverityText) ||
+        firstGrade(readKeyedValues(outcomes, "risk_score"), gradeRiskScore) ||
+        OcsfSeverity.Unknown);
+}
 function readCollectionType(payload) {
     return readString(payload, "type").toUpperCase();
 }
@@ -174,9 +293,7 @@ export default class GoogleSecOpsAlertNormalizer {
                 readString(detection, "ruleVersionId") ||
                 readString(detection, "rule_version_id")
             : "";
-        const severityName = (detection && normalizeOcsfSeverity(readString(detection, "severity"))) ||
-            normalizeOcsfSeverity(readString(payload, "severity")) ||
-            OcsfSeverity.Unknown;
+        const severityName = resolveSeverity(payload, detection);
         const time = parseEventTime((_c = (_b = (_a = readValue(payload, "detectionTime")) !== null && _a !== void 0 ? _a : readValue(payload, "detection_time")) !== null && _b !== void 0 ? _b : readValue(payload, "createdTime")) !== null && _c !== void 0 ? _c : readValue(payload, "created_time"));
         /*
          * Mine the matched UDM sample events for entities. The detection row's
@@ -216,8 +333,8 @@ export default class GoogleSecOpsAlertNormalizer {
                 readString(payload, "detection.alert_state") ||
                 "",
             message,
-            vendorName: "Google",
-            productName: "Google SecOps",
+            vendorName: GOOGLE_SECOPS_VENDOR_NAME,
+            productName: GOOGLE_SECOPS_PRODUCT_NAME,
             ruleId,
             ruleName,
             mitreTactics: firstSample ? firstSample.mitreTactics : [],

package/build/dist/Utils/SecurityEvent/GoogleSecOpsAlertNormalizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"GoogleSecOpsAlertNormalizer.js","sourceRoot":"","sources":["../../../../Utils/SecurityEvent/GoogleSecOpsAlertNormalizer.ts"],"names":[],"mappings":"AAEA,OAAO,YAAY,EAAE,EACnB,cAAc,EACd,qBAAqB,GACtB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,UAAU,EACV,SAAS,GACV,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,2BAA2B,GAAW,IAAI,CAAC;AAEjD;;;;GAIG;AACH,MAAM,iBAAiB,GAAW,EAAE,CAAC;AAErC;;;;GAIG;AACH,MAAM,gBAAgB,GAAkB;IACtC,gBAAgB;IAChB,cAAc;IACd,iBAAiB;IACjB,iBAAiB;IACjB,4BAA4B;IAC5B,YAAY;CACb,CAAC;AAEF,SAAS,mBAAmB,CAAC,OAAmB;;IAC9C,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,MAAM,kBAAkB,GACtB,MAAA,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC,mCACxC,SAAS,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAE5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACpD,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAc,SAAS,CACrC,OAAqB,EACrB,YAAY,CACb,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACvC,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACxD,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAc,SAAS,CAAC,SAAuB,EAAE,OAAO,CAAC,CAAC;YAErE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAmB;IAC7C,MAAM,SAAS,GAAc,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE7D,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAc,SAAS,CAAC,CAAC,CAAc,CAAC;QACnD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,KAAmB,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,SAAuB,CAAC;IACjC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAmB;IAC7C,OAAO,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAmB;IACnC,MAAM,IAAI,GAAc,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAc,EAAW,EAAE;QAC7C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC,CAAkB,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,OAAmB;IACpD,MAAM,UAAU,GACd,UAAU,CAAC,OAAO,EAAE,8BAA8B,CAAC;QACnD,UAAU,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IAEzD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,YAAY,GAAW;QAC3B,UAAU,CAAC,OAAO,EAAE,0BAA0B,CAAC;YAC7C,UAAU,CAAC,OAAO,EAAE,4BAA4B,CAAC;QACnD,UAAU,CAAC,OAAO,EAAE,2BAA2B,CAAC;YAC9C,UAAU,CAAC,OAAO,EAAE,6BAA6B,CAAC;QACpD,UAAU,CAAC,OAAO,EAAE,gCAAgC,CAAC;YACnD,UAAU,CAAC,OAAO,EAAE,mCAAmC,CAAC;KAC3D;SACE,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE;QAChC,OAAO,IAAI,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;IAEb,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,GAAG,YAAY,QAAQ,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAkB,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,IAAI,GAAW,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAEjD;;;OAGG;IACH,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7C,OAAO,iBAAiB,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,2BAA2B;IACvC,MAAM,CAAC,mBAAmB,CAAC,OAAmB;QACnD,MAAM,IAAI,GAAW,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEjD;;;;WAIG;QACH,IACE,kBAAkB,CAAC,OAAO,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC/B,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC;YACxC,SAAS,CAAC,OAAO,EAAE,qBAAqB,CAAC,EACzC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED;;;;WAIG;QACH,MAAM,EAAE,GAAc,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAE/C,OAAO,CACL,OAAO,EAAE,KAAK,QAAQ;YACtB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE;YAChB,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAChC,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,SAAS,CAAC,OAAmB;;QACzC,MAAM,SAAS,GAAsB,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEjE,MAAM,QAAQ,GAAW,SAAS;YAChC,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC;YACzE,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,MAAM,GAAW,SAAS;YAC9B,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC;gBAC/B,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC;gBAChC,UAAU,CAAC,SAAS,EAAE,eAAe,CAAC;gBACtC,UAAU,CAAC,SAAS,EAAE,iBAAiB,CAAC;YAC1C,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,YAAY,GAChB,CAAC,SAAS,IAAI,qBAAqB,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;YACvE,qBAAqB,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACtD,YAAY,CAAC,OAAO,CAAC;QAEvB,MAAM,IAAI,GAAgB,cAAc,CACtC,MAAA,MAAA,MAAA,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,mCACjC,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,mCACpC,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC,mCACjC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CACrC,CAAC;QAEF;;;;;WAKG;QACH,MAAM,YAAY,GAAsB,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,iBAAiB,GAAkB,EAAE,CAAC;QAC5C,IAAI,WAAW,GAAmC,IAAI,CAAC;QAEvD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,MAAM,UAAU,GACd,aAAa,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAEvC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,WAAW,GAAG,UAAU,CAAC;YAC3B,CAAC;YAED,iBAAiB,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,uBAAuB,CAC3D,2BAA2B,CAC5B,CAAC;QAEF,MAAM,WAAW,GAAW,SAAS;YACnC,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,aAAa,CAAC;YACtC,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,OAAO,GACX,QAAQ;YACR,WAAW;YACX,yBAAyB,CAAC,OAAO,CAAC;YAClC,yBAAyB,CAAC;QAE5B,OAAO;YACL,IAAI,EAAE,IAAI,IAAI,IAAI,IAAI,EAAE;YACxB,QAAQ,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC;YACnE,WAAW;YACX,YAAY;YACZ,QAAQ,EAAE,2BAA2B;YACrC,SAAS,EAAE,mBAAmB;YAC9B,YAAY,EAAE,QAAQ;YACtB,UAAU,EAAE,cAAc,CAAC,YAAY,CAAC;YACxC,YAAY;YACZ,UAAU,EACR,UAAU,CAAC,OAAO,EAAE,sBAAsB,CAAC;gBAC3C,UAAU,CAAC,OAAO,EAAE,uBAAuB,CAAC;gBAC5C,EAAE;YACJ,OAAO;YACP,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,eAAe;YAC5B,MAAM;YACN,QAAQ;YACR,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;YACzD,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;YAC/D,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;YAC3D,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;YAC3D,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACvD,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE;YACjE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YACrD,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YACrD,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YACjD,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACpD,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE;YAC7D,WAAW,EAAE,gBAAgB,CAAC,iBAAiB,CAAC;YAChD,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC;SACpC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"GoogleSecOpsAlertNormalizer.js","sourceRoot":"","sources":["../../../../Utils/SecurityEvent/GoogleSecOpsAlertNormalizer.ts"],"names":[],"mappings":"AAEA,OAAO,YAAY,EAAE,EACnB,cAAc,EACd,qBAAqB,GACtB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,UAAU,EACV,SAAS,GACV,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAW,IAAI,CAAC;AAExD,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAW,QAAQ,CAAC;AAC1D,MAAM,CAAC,MAAM,0BAA0B,GAAW,eAAe,CAAC;AAElE;;;;GAIG;AACH,MAAM,iBAAiB,GAAW,EAAE,CAAC;AAErC;;;;GAIG;AACH,MAAM,gBAAgB,GAAkB;IACtC,gBAAgB;IAChB,cAAc;IACd,iBAAiB;IACjB,iBAAiB;IACjB,4BAA4B;IAC5B,YAAY;CACb,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAGtC;IACH,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE;IAChD,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,EAAE;IAC5C,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,MAAM,EAAE;IAC9C,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE;IAC3C,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,aAAa,EAAE;CACrD,CAAC;AAEF,SAAS,mBAAmB,CAAC,OAAmB;;IAC9C,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,MAAM,kBAAkB,GACtB,MAAA,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC,mCACxC,SAAS,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAE5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACpD,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAc,SAAS,CACrC,OAAqB,EACrB,YAAY,CACb,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACvC,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACxD,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAc,SAAS,CAAC,SAAuB,EAAE,OAAO,CAAC,CAAC;YAErE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAmB;IAC7C,MAAM,SAAS,GAAc,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE7D,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAc,SAAS,CAAC,CAAC,CAAc,CAAC;QACnD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,KAAmB,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,SAAuB,CAAC;IACjC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAe,EAAE,GAAW;IACnD,MAAM,MAAM,GAAW,GAAG,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,MAAM,GAAqB,EAAE,CAAC;IAEpC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAe,KAAoB,CAAC,KAAK,CAAc,CAAC;YAEtE,IACE,OAAO,QAAQ,KAAK,QAAQ;gBAC5B,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,EACxC,CAAC;gBACD,MAAM,CAAC,IAAI,CAAE,KAAoB,CAAC,OAAO,CAAc,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAkB,CAAC,EAAE,CAAC;YACvD,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;gBAC7C,MAAM,CAAC,IAAI,CAAE,IAAmB,CAAC,QAAQ,CAAc,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,KAAgB;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAwB,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3E,OAAO,QAAQ,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7D,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB;IACtC,IAAI,KAAK,GAAW,MAAM,CAAC,GAAG,CAAC;IAE/B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,8BAA8B,EAAE,CAAC;QAClD,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,MAAwB,EACxB,KAAgD;IAEhD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAwB,KAAK,CAAC,KAAK,CAAC,CAAC;QAEnD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,eAAe,CACtB,OAAmB,EACnB,SAA4B;;IAE5B,MAAM,UAAU,GAAc,SAAS;QACrC,CAAC,CAAC,MAAA,SAAS,CAAC,SAAS,EAAE,YAAY,CAAC,mCAAI,SAAS,CAAC,SAAS,EAAE,aAAa,CAAC;QAC3E,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,QAAQ,GAAc,SAAS;QACnC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC;IAET,OAAO,CACL,CAAC,SAAS,IAAI,iBAAiB,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QACnE,iBAAiB,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAClD,UAAU,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,iBAAiB,CAAC;QACtE,UAAU,CAAC,eAAe,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,cAAc,CAAC;QACnE,YAAY,CAAC,OAAO,CACrB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAmB;IAC7C,OAAO,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAmB;IACnC,MAAM,IAAI,GAAc,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAc,EAAW,EAAE;QAC7C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC,CAAkB,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,OAAmB;IACpD,MAAM,UAAU,GACd,UAAU,CAAC,OAAO,EAAE,8BAA8B,CAAC;QACnD,UAAU,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IAEzD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,YAAY,GAAW;QAC3B,UAAU,CAAC,OAAO,EAAE,0BAA0B,CAAC;YAC7C,UAAU,CAAC,OAAO,EAAE,4BAA4B,CAAC;QACnD,UAAU,CAAC,OAAO,EAAE,2BAA2B,CAAC;YAC9C,UAAU,CAAC,OAAO,EAAE,6BAA6B,CAAC;QACpD,UAAU,CAAC,OAAO,EAAE,gCAAgC,CAAC;YACnD,UAAU,CAAC,OAAO,EAAE,mCAAmC,CAAC;KAC3D;SACE,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE;QAChC,OAAO,IAAI,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;IAEb,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,GAAG,YAAY,QAAQ,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAkB,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,IAAI,GAAW,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAEjD;;;OAGG;IACH,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7C,OAAO,iBAAiB,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,2BAA2B;IACvC,MAAM,CAAC,mBAAmB,CAAC,OAAmB;QACnD,MAAM,IAAI,GAAW,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEjD;;;;WAIG;QACH,IACE,kBAAkB,CAAC,OAAO,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC/B,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC;YACxC,SAAS,CAAC,OAAO,EAAE,qBAAqB,CAAC,EACzC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED;;;;WAIG;QACH,MAAM,EAAE,GAAc,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAE/C,OAAO,CACL,OAAO,EAAE,KAAK,QAAQ;YACtB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE;YAChB,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAChC,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,SAAS,CAAC,OAAmB;;QACzC,MAAM,SAAS,GAAsB,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEjE,MAAM,QAAQ,GAAW,SAAS;YAChC,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC;YACzE,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,MAAM,GAAW,SAAS;YAC9B,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC;gBAC/B,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC;gBAChC,UAAU,CAAC,SAAS,EAAE,eAAe,CAAC;gBACtC,UAAU,CAAC,SAAS,EAAE,iBAAiB,CAAC;YAC1C,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,YAAY,GAAiB,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEvE,MAAM,IAAI,GAAgB,cAAc,CACtC,MAAA,MAAA,MAAA,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,mCACjC,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,mCACpC,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC,mCACjC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CACrC,CAAC;QAEF;;;;;WAKG;QACH,MAAM,YAAY,GAAsB,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,iBAAiB,GAAkB,EAAE,CAAC;QAC5C,IAAI,WAAW,GAAmC,IAAI,CAAC;QAEvD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,MAAM,UAAU,GACd,aAAa,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAEvC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,WAAW,GAAG,UAAU,CAAC;YAC3B,CAAC;YAED,iBAAiB,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,uBAAuB,CAC3D,2BAA2B,CAC5B,CAAC;QAEF,MAAM,WAAW,GAAW,SAAS;YACnC,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,aAAa,CAAC;YACtC,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,OAAO,GACX,QAAQ;YACR,WAAW;YACX,yBAAyB,CAAC,OAAO,CAAC;YAClC,yBAAyB,CAAC;QAE5B,OAAO;YACL,IAAI,EAAE,IAAI,IAAI,IAAI,IAAI,EAAE;YACxB,QAAQ,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC;YACnE,WAAW;YACX,YAAY;YACZ,QAAQ,EAAE,2BAA2B;YACrC,SAAS,EAAE,mBAAmB;YAC9B,YAAY,EAAE,QAAQ;YACtB,UAAU,EAAE,cAAc,CAAC,YAAY,CAAC;YACxC,YAAY;YACZ,UAAU,EACR,UAAU,CAAC,OAAO,EAAE,sBAAsB,CAAC;gBAC3C,UAAU,CAAC,OAAO,EAAE,uBAAuB,CAAC;gBAC5C,EAAE;YACJ,OAAO;YACP,UAAU,EAAE,yBAAyB;YACrC,WAAW,EAAE,0BAA0B;YACvC,MAAM;YACN,QAAQ;YACR,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;YACzD,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;YAC/D,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;YAC3D,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;YAC3D,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACvD,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE;YACjE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YACrD,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YACrD,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YACjD,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACpD,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE;YAC7D,WAAW,EAAE,gBAAgB,CAAC,iBAAiB,CAAC;YAChD,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC;SACpC,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Utils/SecurityEvent/Sigma/SigmaRuleParser.js

@@ -1,6 +1,6 @@
 import yaml from "js-yaml";
 import BadDataException from "../../../Types/Exception/BadDataException";
-import { SigmaLevel, } from "../../../Types/SecurityEvent/SigmaRule";
+import { SIGMA_DEFAULT_LEVEL, SIGMA_SUPPORTED_MODIFIERS, SigmaLevel, } from "../../../Types/SecurityEvent/SigmaRule";
 /*
  * Sigma YAML -> typed SigmaRule.
  *
@@ -11,21 +11,7 @@ import { SigmaLevel, } from "../../../Types/SecurityEvent/SigmaRule";
  * error rather than silently ignored — a rule that parses is a rule the
  * engine evaluates faithfully.
  */
-const SUPPORTED_MODIFIERS = new Set([
-    "contains",
-    "startswith",
-    "endswith",
-    "all",
-    "re",
-    "cased",
-    "gt",
-    "gte",
-    "lt",
-    "lte",
-    "cidr",
-    "exists",
-    "windash",
-]);
+const SUPPORTED_MODIFIERS = new Set(SIGMA_SUPPORTED_MODIFIERS);
 const WHITESPACE_REGEX = /\s/;
 const COUNT_REGEX = /^\d+$/;
 const TACTIC_TAG_REGEX = /^ta\d{4}$/i;
@@ -306,10 +292,10 @@ export default class SigmaRuleParser {
         const condition = new ConditionParser(tokenizeCondition(conditionRaw)).parse();
         // Every referenced selection must exist.
         this.validateConditionReferences(condition, selections);
-        const levelRaw = String(doc["level"] || "medium").toLowerCase();
+        const levelRaw = String(doc["level"] || SIGMA_DEFAULT_LEVEL).toLowerCase();
         const level = Object.values(SigmaLevel).includes(levelRaw)
             ? levelRaw
-            : SigmaLevel.Medium;
+            : SIGMA_DEFAULT_LEVEL;
         const tags = Array.isArray(doc["tags"])
             ? doc["tags"].map((tag) => {
                 return String(tag);

package/build/dist/Utils/SecurityEvent/Sigma/SigmaRuleParser.js.map

@@ -1 +1 @@
-{"version":3,"file":"SigmaRuleParser.js","sourceRoot":"","sources":["../../../../../Utils/SecurityEvent/Sigma/SigmaRuleParser.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,SAAS,CAAC;AAC3B,OAAO,gBAAgB,MAAM,2CAA2C,CAAC;AAGzE,OAAkB,EAGhB,UAAU,GAEX,MAAM,wCAAwC,CAAC;AAEhD;;;;;;;;;GASG;AAEH,MAAM,mBAAmB,GAAgB,IAAI,GAAG,CAAS;IACvD,UAAU;IACV,YAAY;IACZ,UAAU;IACV,KAAK;IACL,IAAI;IACJ,OAAO;IACP,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,MAAM;IACN,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAW,IAAI,CAAC;AACtC,MAAM,WAAW,GAAW,OAAO,CAAC;AACpC,MAAM,gBAAgB,GAAW,YAAY,CAAC;AAC9C,MAAM,mBAAmB,GAAW,qBAAqB,CAAC;AAO1D,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,OAAO,GAAW,EAAE,CAAC;IAEzB,MAAM,KAAK,GAAe,GAAS,EAAE;QACnC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9C,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IAED,KAAK,EAAE,CAAC;IAER,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,eAAe;IAGnB,YAA2B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;QAFvC,aAAQ,GAAW,CAAC,CAAC;IAEqB,CAAC;IAE5C,KAAK;QACV,MAAM,IAAI,GAAuB,IAAI,CAAC,OAAO,EAAE,CAAC;QAEhD,IAAI,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,gBAAgB,CACxB,oEAAoE,IAAI,CAAC,eAAe,EAAE,KAAK,CAChG,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO;QACb,MAAM,QAAQ,GAA8B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE9D,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtB,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAClC,CAAC;IAEO,QAAQ;QACd,MAAM,QAAQ,GAA8B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE9D,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtB,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QACjD,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAEO,YAAY;;QAClB,MAAM,KAAK,GAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,gBAAgB,CACxB,gDAAgD,CACjD,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,MAAM,KAAK,GAAuB,IAAI,CAAC,OAAO,EAAE,CAAC;YAEjD,IAAI,CAAA,MAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,0CAAE,IAAI,MAAK,QAAQ,EAAE,CAAC;gBAClD,MAAM,IAAI,gBAAgB,CACxB,+CAA+C,CAChD,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,gBAAgB,CACxB,kDAAkD,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAW,KAAK,CAAC,KAAK,CAAC;QAEjC,6DAA6D;QAC7D,MAAM,OAAO,GAAW,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAY,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,OAAO,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACtD,MAAM,IAAI,GAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YAE/D,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;gBACtE,MAAM,YAAY,GAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBAEvE,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAClD,MAAM,IAAI,gBAAgB,CACxB,qBAAqB,IAAI,yDAAyD,CACnF,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAEnB,MAAM,UAAU,GAA2B,OAAO;oBAChD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;oBACd,CAAC,CAAE,OAAyB,CAAC;gBAE/B,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,UAAU;oBACV,OAAO,EAAE,YAAY,CAAC,KAAK;iBAC5B,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,gBAAgB,CACxB,iCAAiC,IAAI,iBAAiB,IAAI,iBAAiB,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,MAAM,KAAK,GAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5D,OAAO,OAAO,CACZ,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CACtE,CAAC;IACJ,CAAC;IAEO,eAAe;QACrB,MAAM,KAAK,GAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,GAAW,EACX,QAAmB;IAEnB,MAAM,KAAK,GAAkB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE9C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,GAAG,IAAI,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAkB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE;QACnE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,gBAAgB,CACxB,gDAAgD,QAAQ,SAAS,GAAG,iBAAiB,KAAK,CAAC,IAAI,CAC7F,mBAAmB,CACpB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAqB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtD,CAAC,CAAE,QAA6B;QAChC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAEf,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,GAAG,4BAA4B,CAC3D,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,GAAG,uFAAuF,CACtH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,QAAmB;IACvD,4BAA4B;IAC5B,IACE,QAAQ,KAAK,IAAI;QACjB,OAAO,QAAQ,KAAK,QAAQ;QAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EACxB,CAAC;QACD,MAAM,YAAY,GAAiC,EAAE,CAAC;QAEtD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAsB,CAAC,EAAE,CAAC;YACtD,YAAY,CAAC,IAAI,CACf,qBAAqB,CAAC,GAAG,EAAG,QAAuB,CAAC,GAAG,CAAc,CAAC,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,IAAI,aAAa,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,IAAI,qBAAqB,CACzD,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAY,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAe,EAAW,EAAE;YACrE,OAAO,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,IAAI,SAAS,EAAE,CAAC;YACd,2DAA2D;YAC3D,MAAM,SAAS,GAAwC,EAAE,CAAC;YAE1D,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,MAAM,YAAY,GAAiC,EAAE,CAAC;gBAEtD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAkB,CAAC,EAAE,CAAC;oBAClD,YAAY,CAAC,IAAI,CACf,qBAAqB,CAAC,GAAG,EAAG,IAAmB,CAAC,GAAG,CAAc,CAAC,CACnE,CAAC;gBACJ,CAAC;gBAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,YAAY,GAAY,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAe,EAAW,EAAE;YACxE,OAAO,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,IAAI,YAAY,EAAE,CAAC;YACjB,iEAAiE;YACjE,OAAO;gBACL,IAAI;gBACJ,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAe,EAAU,EAAE;oBACjD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,IAAI,2EAA2E,CAC/G,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,IAAI,4BAA4B,CAChE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB;IAIvC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,UAAU,GAAkB,EAAE,CAAC;IAErC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAW,GAAG,CAAC,WAAW,EAAE,CAAC;QAE7C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAW,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEtD,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,GAAW,SAAS,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;aAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAW,SAAS,CAAC,WAAW,EAAE,CAAC;YAClD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,eAAe;IAC3B,MAAM,CAAC,KAAK,CAAC,QAAgB;QAClC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,gBAAgB,CAAC,4BAA4B,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAe,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,8BACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,gBAAgB,CAAC,qCAAqC,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,GAAG,GAAe,MAAoB,CAAC;QAE7C,MAAM,SAAS,GAAc,GAAG,CAAC,WAAW,CAAc,CAAC;QAE3D,IACE,CAAC,SAAS;YACV,OAAO,SAAS,KAAK,QAAQ;YAC7B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EACxB,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,gDAAgD,CACjD,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAe,SAAuB,CAAC;QAE5D,MAAM,YAAY,GAAc,eAAe,CAAC,WAAW,CAAc,CAAC;QAE1E,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7D,MAAM,IAAI,gBAAgB,CACxB,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,gBAAgB,CACxB,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAA0B,EAAE,CAAC;QAE7C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/C,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;gBAC/C,SAAS;YACX,CAAC;YAED,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,CAAc,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,gBAAgB,CACxB,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAuB,IAAI,eAAe,CACvD,iBAAiB,CAAC,YAAY,CAAC,CAChC,CAAC,KAAK,EAAE,CAAC;QAEV,yCAAyC;QACzC,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAW,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACxE,MAAM,KAAK,GACT,MAAM,CAAC,MAAM,CAAC,UAAU,CACzB,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAClB,CAAC,CAAE,QAAuB;YAC1B,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAEtB,MAAM,IAAI,GAAkB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC,CAAE,GAAG,CAAC,MAAM,CAAsB,CAAC,GAAG,CAAC,CAAC,GAAc,EAAU,EAAE;gBAC/D,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAEnD,MAAM,SAAS,GAAuB,EAAE,CAAC;QACzC,MAAM,YAAY,GAAc,GAAG,CAAC,WAAW,CAAc,CAAC;QAE9D,IACE,YAAY;YACZ,OAAO,YAAY,KAAK,QAAQ;YAChC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAC5B,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,YAA0B,CAAC,EAAE,CAAC;gBAC1D,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAE,YAA2B,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,qBAAqB,CAAC;YACpD,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAC7C,KAAK;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI;YACJ,YAAY,EAAE,OAAO;YACrB,eAAe,EAAE,UAAU;YAC3B,SAAS;YACT,UAAU;YACV,SAAS;SACV,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,2BAA2B,CACxC,IAAwB,EACxB,UAAiC;QAEjC,MAAM,KAAK,GAAkB,UAAU,CAAC,GAAG,CACzC,CAAC,SAAyB,EAAU,EAAE;YACpC,OAAO,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC,CACF,CAAC;QAEF,MAAM,KAAK,GAA0C,CACnD,OAA2B,EACrB,EAAE;YACR,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClC,MAAM,IAAI,gBAAgB,CACxB,uCAAuC,OAAO,CAAC,IAAI,wBAAwB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/F,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;oBAC7C,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,GAAkB,eAAe,CAAC,mBAAmB,CAChE,OAAO,CAAC,OAAO,EACf,KAAK,CACN,CAAC;gBAEF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,gBAAgB,CACxB,6BAA6B,OAAO,CAAC,OAAO,6CAA6C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7G,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC3B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrC,KAAK,CAAC,KAAK,CAAC,CAAC;YACf,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,mBAAmB,CAC/B,OAAe,EACf,KAAoB;QAEpB,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAW,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE;gBAC5C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE;YAC5C,OAAO,IAAI,KAAK,OAAO,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"SigmaRuleParser.js","sourceRoot":"","sources":["../../../../../Utils/SecurityEvent/Sigma/SigmaRuleParser.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,SAAS,CAAC;AAC3B,OAAO,gBAAgB,MAAM,2CAA2C,CAAC;AAGzE,OAAkB,EAChB,mBAAmB,EACnB,yBAAyB,EAGzB,UAAU,GAEX,MAAM,wCAAwC,CAAC;AAEhD;;;;;;;;;GASG;AAEH,MAAM,mBAAmB,GAAgB,IAAI,GAAG,CAC9C,yBAAyB,CAC1B,CAAC;AAEF,MAAM,gBAAgB,GAAW,IAAI,CAAC;AACtC,MAAM,WAAW,GAAW,OAAO,CAAC;AACpC,MAAM,gBAAgB,GAAW,YAAY,CAAC;AAC9C,MAAM,mBAAmB,GAAW,qBAAqB,CAAC;AAO1D,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,OAAO,GAAW,EAAE,CAAC;IAEzB,MAAM,KAAK,GAAe,GAAS,EAAE;QACnC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9C,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IAED,KAAK,EAAE,CAAC;IAER,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,eAAe;IAGnB,YAA2B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;QAFvC,aAAQ,GAAW,CAAC,CAAC;IAEqB,CAAC;IAE5C,KAAK;QACV,MAAM,IAAI,GAAuB,IAAI,CAAC,OAAO,EAAE,CAAC;QAEhD,IAAI,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,gBAAgB,CACxB,oEAAoE,IAAI,CAAC,eAAe,EAAE,KAAK,CAChG,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO;QACb,MAAM,QAAQ,GAA8B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE9D,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtB,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAClC,CAAC;IAEO,QAAQ;QACd,MAAM,QAAQ,GAA8B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE9D,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtB,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QACjD,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAEO,YAAY;;QAClB,MAAM,KAAK,GAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,gBAAgB,CACxB,gDAAgD,CACjD,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,MAAM,KAAK,GAAuB,IAAI,CAAC,OAAO,EAAE,CAAC;YAEjD,IAAI,CAAA,MAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,0CAAE,IAAI,MAAK,QAAQ,EAAE,CAAC;gBAClD,MAAM,IAAI,gBAAgB,CACxB,+CAA+C,CAChD,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,gBAAgB,CACxB,kDAAkD,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAW,KAAK,CAAC,KAAK,CAAC;QAEjC,6DAA6D;QAC7D,MAAM,OAAO,GAAW,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAY,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,OAAO,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACtD,MAAM,IAAI,GAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YAE/D,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;gBACtE,MAAM,YAAY,GAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBAEvE,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAClD,MAAM,IAAI,gBAAgB,CACxB,qBAAqB,IAAI,yDAAyD,CACnF,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAEnB,MAAM,UAAU,GAA2B,OAAO;oBAChD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;oBACd,CAAC,CAAE,OAAyB,CAAC;gBAE/B,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,UAAU;oBACV,OAAO,EAAE,YAAY,CAAC,KAAK;iBAC5B,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,gBAAgB,CACxB,iCAAiC,IAAI,iBAAiB,IAAI,iBAAiB,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,MAAM,KAAK,GAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5D,OAAO,OAAO,CACZ,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CACtE,CAAC;IACJ,CAAC;IAEO,eAAe;QACrB,MAAM,KAAK,GAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,GAAW,EACX,QAAmB;IAEnB,MAAM,KAAK,GAAkB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE9C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,GAAG,IAAI,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAkB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE;QACnE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,gBAAgB,CACxB,gDAAgD,QAAQ,SAAS,GAAG,iBAAiB,KAAK,CAAC,IAAI,CAC7F,mBAAmB,CACpB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAqB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtD,CAAC,CAAE,QAA6B;QAChC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAEf,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,GAAG,4BAA4B,CAC3D,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,GAAG,uFAAuF,CACtH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,QAAmB;IACvD,4BAA4B;IAC5B,IACE,QAAQ,KAAK,IAAI;QACjB,OAAO,QAAQ,KAAK,QAAQ;QAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EACxB,CAAC;QACD,MAAM,YAAY,GAAiC,EAAE,CAAC;QAEtD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAsB,CAAC,EAAE,CAAC;YACtD,YAAY,CAAC,IAAI,CACf,qBAAqB,CAAC,GAAG,EAAG,QAAuB,CAAC,GAAG,CAAc,CAAC,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,IAAI,aAAa,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,IAAI,qBAAqB,CACzD,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAY,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAe,EAAW,EAAE;YACrE,OAAO,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,IAAI,SAAS,EAAE,CAAC;YACd,2DAA2D;YAC3D,MAAM,SAAS,GAAwC,EAAE,CAAC;YAE1D,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,MAAM,YAAY,GAAiC,EAAE,CAAC;gBAEtD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAkB,CAAC,EAAE,CAAC;oBAClD,YAAY,CAAC,IAAI,CACf,qBAAqB,CAAC,GAAG,EAAG,IAAmB,CAAC,GAAG,CAAc,CAAC,CACnE,CAAC;gBACJ,CAAC;gBAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,YAAY,GAAY,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAe,EAAW,EAAE;YACxE,OAAO,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,IAAI,YAAY,EAAE,CAAC;YACjB,iEAAiE;YACjE,OAAO;gBACL,IAAI;gBACJ,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAe,EAAU,EAAE;oBACjD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,IAAI,2EAA2E,CAC/G,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,IAAI,4BAA4B,CAChE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB;IAIvC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,UAAU,GAAkB,EAAE,CAAC;IAErC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAW,GAAG,CAAC,WAAW,EAAE,CAAC;QAE7C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAW,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEtD,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,GAAW,SAAS,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;aAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAW,SAAS,CAAC,WAAW,EAAE,CAAC;YAClD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,eAAe;IAC3B,MAAM,CAAC,KAAK,CAAC,QAAgB;QAClC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,gBAAgB,CAAC,4BAA4B,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAe,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,8BACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,gBAAgB,CAAC,qCAAqC,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,GAAG,GAAe,MAAoB,CAAC;QAE7C,MAAM,SAAS,GAAc,GAAG,CAAC,WAAW,CAAc,CAAC;QAE3D,IACE,CAAC,SAAS;YACV,OAAO,SAAS,KAAK,QAAQ;YAC7B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EACxB,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,gDAAgD,CACjD,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAe,SAAuB,CAAC;QAE5D,MAAM,YAAY,GAAc,eAAe,CAAC,WAAW,CAAc,CAAC;QAE1E,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7D,MAAM,IAAI,gBAAgB,CACxB,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,gBAAgB,CACxB,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAA0B,EAAE,CAAC;QAE7C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/C,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;gBAC/C,SAAS;YACX,CAAC;YAED,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,CAAc,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,gBAAgB,CACxB,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAuB,IAAI,eAAe,CACvD,iBAAiB,CAAC,YAAY,CAAC,CAChC,CAAC,KAAK,EAAE,CAAC;QAEV,yCAAyC;QACzC,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAW,MAAM,CAC7B,GAAG,CAAC,OAAO,CAAC,IAAI,mBAAmB,CACpC,CAAC,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GACT,MAAM,CAAC,MAAM,CAAC,UAAU,CACzB,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAClB,CAAC,CAAE,QAAuB;YAC1B,CAAC,CAAC,mBAAmB,CAAC;QAExB,MAAM,IAAI,GAAkB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC,CAAE,GAAG,CAAC,MAAM,CAAsB,CAAC,GAAG,CAAC,CAAC,GAAc,EAAU,EAAE;gBAC/D,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAEnD,MAAM,SAAS,GAAuB,EAAE,CAAC;QACzC,MAAM,YAAY,GAAc,GAAG,CAAC,WAAW,CAAc,CAAC;QAE9D,IACE,YAAY;YACZ,OAAO,YAAY,KAAK,QAAQ;YAChC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAC5B,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,YAA0B,CAAC,EAAE,CAAC;gBAC1D,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAE,YAA2B,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,qBAAqB,CAAC;YACpD,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAC7C,KAAK;YACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI;YACJ,YAAY,EAAE,OAAO;YACrB,eAAe,EAAE,UAAU;YAC3B,SAAS;YACT,UAAU;YACV,SAAS;SACV,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,2BAA2B,CACxC,IAAwB,EACxB,UAAiC;QAEjC,MAAM,KAAK,GAAkB,UAAU,CAAC,GAAG,CACzC,CAAC,SAAyB,EAAU,EAAE;YACpC,OAAO,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC,CACF,CAAC;QAEF,MAAM,KAAK,GAA0C,CACnD,OAA2B,EACrB,EAAE;YACR,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClC,MAAM,IAAI,gBAAgB,CACxB,uCAAuC,OAAO,CAAC,IAAI,wBAAwB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/F,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;oBAC7C,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,GAAkB,eAAe,CAAC,mBAAmB,CAChE,OAAO,CAAC,OAAO,EACf,KAAK,CACN,CAAC;gBAEF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,gBAAgB,CACxB,6BAA6B,OAAO,CAAC,OAAO,6CAA6C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7G,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC3B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrC,KAAK,CAAC,KAAK,CAAC,CAAC;YACf,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,mBAAmB,CAC/B,OAAe,EACf,KAAoB;QAEpB,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAW,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE;gBAC5C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE;YAC5C,OAAO,IAAI,KAAK,OAAO,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/build/dist/Utils/Slo/SloBurnRateTemplate.js

@@ -148,8 +148,8 @@ export const SLO_BURN_RATE_MARKDOWN_TEMPLATE_MAX_LENGTH = 50000;
  * existed, expressed as templates. Rendering these with the variable map
  * reproduces the old strings character for character (the worker test pins
  * the literal), so a rule with blank templates - every existing and every
- * seeded rule - raises exactly what it always did. The dashboard shows them as
- * placeholders, so the default is visible rather than implied.
+ * seeded rule - raises exactly what it always did. The dashboard prefills new
+ * rules with these templates so users can review and customize the defaults.
  */
 export const DEFAULT_SLO_BURN_RATE_TITLE_TEMPLATE = "SLO burn rate: {{sloName}} — {{ruleName}}";
 export const DEFAULT_SLO_BURN_RATE_DESCRIPTION_TEMPLATE = 'SLO "{{sloName}}" is burning its error budget too fast. Rule "{{ruleName}}": burn rate over the last {{longWindowInMinutes}} minutes is {{longWindowBurnRate}}x and over the last {{shortWindowInMinutes}} minutes is {{shortWindowBurnRate}}x — both at or above the threshold of {{burnRateThreshold}}x. Error budget remaining: {{errorBudgetRemainingPercentage}}% ({{errorBudgetRemainingMinutes}} minutes).';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oneuptime/common",
-  "version": "13.0.7",
+  "version": "13.0.8",
   "description": "",
   "repository": {
     "type": "git",