@panguard-ai/panguard-guard 1.4.5 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5500) hide show
  1. package/dist/agent/atr-action-handlers.d.ts.map +1 -1
  2. package/dist/agent/atr-action-handlers.js +35 -6
  3. package/dist/agent/atr-action-handlers.js.map +1 -1
  4. package/dist/agent/report-agent.js +1 -1
  5. package/dist/agent/report-agent.js.map +1 -1
  6. package/dist/cli/index.js +71 -54
  7. package/dist/cli/index.js.map +1 -1
  8. package/dist/config.js +2 -2
  9. package/dist/config.js.map +1 -1
  10. package/dist/daemon/index.d.ts.map +1 -1
  11. package/dist/daemon/index.js +27 -8
  12. package/dist/daemon/index.js.map +1 -1
  13. package/dist/dashboard/index.d.ts +2 -0
  14. package/dist/dashboard/index.d.ts.map +1 -1
  15. package/dist/dashboard/index.js +348 -79
  16. package/dist/dashboard/index.js.map +1 -1
  17. package/dist/engines/atr-drafter.d.ts.map +1 -1
  18. package/dist/engines/atr-drafter.js +2 -2
  19. package/dist/engines/atr-drafter.js.map +1 -1
  20. package/dist/engines/atr-engine.d.ts +10 -2
  21. package/dist/engines/atr-engine.d.ts.map +1 -1
  22. package/dist/engines/atr-engine.js +56 -18
  23. package/dist/engines/atr-engine.js.map +1 -1
  24. package/dist/engines/skill-watcher.d.ts.map +1 -1
  25. package/dist/engines/skill-watcher.js +5 -4
  26. package/dist/engines/skill-watcher.js.map +1 -1
  27. package/dist/engines/skill-whitelist.d.ts +1 -0
  28. package/dist/engines/skill-whitelist.d.ts.map +1 -1
  29. package/dist/engines/skill-whitelist.js +9 -4
  30. package/dist/engines/skill-whitelist.js.map +1 -1
  31. package/dist/guard-engine.d.ts +7 -0
  32. package/dist/guard-engine.d.ts.map +1 -1
  33. package/dist/guard-engine.js +108 -5
  34. package/dist/guard-engine.js.map +1 -1
  35. package/dist/index.d.ts +2 -1
  36. package/dist/index.d.ts.map +1 -1
  37. package/dist/index.js +1 -1
  38. package/dist/index.js.map +1 -1
  39. package/dist/monitors/index.d.ts +0 -7
  40. package/dist/monitors/index.d.ts.map +1 -1
  41. package/dist/monitors/index.js +0 -4
  42. package/dist/monitors/index.js.map +1 -1
  43. package/dist/rule-loader.d.ts.map +1 -1
  44. package/dist/rule-loader.js +6 -7
  45. package/dist/rule-loader.js.map +1 -1
  46. package/dist/rule-sync.d.ts +1 -1
  47. package/dist/rule-sync.d.ts.map +1 -1
  48. package/dist/rule-sync.js +9 -7
  49. package/dist/rule-sync.js.map +1 -1
  50. package/dist/summary/daily-summary.d.ts.map +1 -1
  51. package/dist/summary/daily-summary.js +4 -4
  52. package/dist/summary/daily-summary.js.map +1 -1
  53. package/dist/threat-cloud/index.d.ts +10 -1
  54. package/dist/threat-cloud/index.d.ts.map +1 -1
  55. package/dist/threat-cloud/index.js +64 -6
  56. package/dist/threat-cloud/index.js.map +1 -1
  57. package/dist/types.d.ts +2 -2
  58. package/dist/types.d.ts.map +1 -1
  59. package/dist/watchers/dependency-watcher.d.ts.map +1 -1
  60. package/dist/watchers/dependency-watcher.js +2 -1
  61. package/dist/watchers/dependency-watcher.js.map +1 -1
  62. package/package.json +10 -9
  63. package/bundled-rules/sigma-rules/.gitkeep +0 -0
  64. package/bundled-rules/sigma-rules/auto-generated/.meta.json +0 -626
  65. package/bundled-rules/sigma-rules/auto-generated/.rules-meta.json +0 -44
  66. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-02d66266.yml +0 -30
  67. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-09c197b6.yml +0 -29
  68. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-0a127b82.yml +0 -28
  69. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-12c6cf09.yml +0 -29
  70. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-138e2c5f.yml +0 -30
  71. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-144f04b0.yml +0 -30
  72. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-14dc41fc.yml +0 -30
  73. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-259e088a.yml +0 -29
  74. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-2dda51a5.yml +0 -30
  75. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-318e5d10.yml +0 -29
  76. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-34e186b7.yml +0 -29
  77. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-356ceb2d.yml +0 -29
  78. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-3747a529.yml +0 -30
  79. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-3acc1e4c.yml +0 -29
  80. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-3b84adb8.yml +0 -29
  81. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-3d47b8a5.yml +0 -30
  82. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-3d9474c8.yml +0 -29
  83. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-3fdeaae2.yml +0 -30
  84. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-50391b7a.yml +0 -29
  85. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-64108d99.yml +0 -29
  86. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-6806d87e.yml +0 -30
  87. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-683bc02e.yml +0 -29
  88. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-6b908472.yml +0 -29
  89. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-6ccc9a9a.yml +0 -29
  90. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-704f2829.yml +0 -30
  91. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-728445a5.yml +0 -29
  92. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-7d2469e4.yml +0 -28
  93. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-7efc680b.yml +0 -29
  94. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-80413854.yml +0 -29
  95. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-8455faa8.yml +0 -30
  96. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-84c22235.yml +0 -29
  97. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-991097d5.yml +0 -29
  98. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-a2a7dea0.yml +0 -29
  99. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-a329a8c4.yml +0 -29
  100. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-a4953a0c.yml +0 -29
  101. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-b761f239.yml +0 -30
  102. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-bccd0386.yml +0 -29
  103. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-c6523317.yml +0 -29
  104. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-c7456969.yml +0 -29
  105. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-c89d1856.yml +0 -30
  106. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-cb47afe1.yml +0 -30
  107. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-d11c2adf.yml +0 -29
  108. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-d13720b9.yml +0 -30
  109. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-da034fdb.yml +0 -30
  110. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-db92510a.yml +0 -29
  111. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-e53836a4.yml +0 -30
  112. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-e6f9a231.yml +0 -30
  113. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-ee8e125d.yml +0 -29
  114. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-f07e4017.yml +0 -30
  115. package/bundled-rules/sigma-rules/auto-generated/auth-bypass-f942a244.yml +0 -29
  116. package/bundled-rules/sigma-rules/auto-generated/code-injection-0845d54d.yml +0 -33
  117. package/bundled-rules/sigma-rules/auto-generated/code-injection-0b4ed6f6.yml +0 -36
  118. package/bundled-rules/sigma-rules/auto-generated/code-injection-14646374.yml +0 -33
  119. package/bundled-rules/sigma-rules/auto-generated/code-injection-2b848b90.yml +0 -33
  120. package/bundled-rules/sigma-rules/auto-generated/code-injection-3d49d056.yml +0 -33
  121. package/bundled-rules/sigma-rules/auto-generated/code-injection-4a75e716.yml +0 -33
  122. package/bundled-rules/sigma-rules/auto-generated/code-injection-4e615e9c.yml +0 -32
  123. package/bundled-rules/sigma-rules/auto-generated/code-injection-5d00f27d.yml +0 -32
  124. package/bundled-rules/sigma-rules/auto-generated/code-injection-7057b8cd.yml +0 -33
  125. package/bundled-rules/sigma-rules/auto-generated/code-injection-7a268eb0.yml +0 -33
  126. package/bundled-rules/sigma-rules/auto-generated/code-injection-84de0f98.yml +0 -32
  127. package/bundled-rules/sigma-rules/auto-generated/code-injection-85cb64d7.yml +0 -32
  128. package/bundled-rules/sigma-rules/auto-generated/code-injection-944eb289.yml +0 -33
  129. package/bundled-rules/sigma-rules/auto-generated/code-injection-a2a922f5.yml +0 -33
  130. package/bundled-rules/sigma-rules/auto-generated/code-injection-a474bd30.yml +0 -33
  131. package/bundled-rules/sigma-rules/auto-generated/code-injection-a91d74a0.yml +0 -32
  132. package/bundled-rules/sigma-rules/auto-generated/code-injection-cb4008a5.yml +0 -33
  133. package/bundled-rules/sigma-rules/auto-generated/code-injection-dbfc8a28.yml +0 -32
  134. package/bundled-rules/sigma-rules/auto-generated/command-injection-036c2eb1.yml +0 -33
  135. package/bundled-rules/sigma-rules/auto-generated/command-injection-03c4921b.yml +0 -33
  136. package/bundled-rules/sigma-rules/auto-generated/command-injection-0addc01d.yml +0 -34
  137. package/bundled-rules/sigma-rules/auto-generated/command-injection-0bc5027f.yml +0 -33
  138. package/bundled-rules/sigma-rules/auto-generated/command-injection-107c1f90.yml +0 -34
  139. package/bundled-rules/sigma-rules/auto-generated/command-injection-115ab758.yml +0 -34
  140. package/bundled-rules/sigma-rules/auto-generated/command-injection-13d42ad1.yml +0 -33
  141. package/bundled-rules/sigma-rules/auto-generated/command-injection-14b0eb11.yml +0 -34
  142. package/bundled-rules/sigma-rules/auto-generated/command-injection-16959437.yml +0 -33
  143. package/bundled-rules/sigma-rules/auto-generated/command-injection-1725c2c2.yml +0 -34
  144. package/bundled-rules/sigma-rules/auto-generated/command-injection-1a0dc0f4.yml +0 -33
  145. package/bundled-rules/sigma-rules/auto-generated/command-injection-1bee9f5b.yml +0 -33
  146. package/bundled-rules/sigma-rules/auto-generated/command-injection-1c405735.yml +0 -34
  147. package/bundled-rules/sigma-rules/auto-generated/command-injection-1ca77d8b.yml +0 -33
  148. package/bundled-rules/sigma-rules/auto-generated/command-injection-1d1c77dd.yml +0 -34
  149. package/bundled-rules/sigma-rules/auto-generated/command-injection-1f68550b.yml +0 -33
  150. package/bundled-rules/sigma-rules/auto-generated/command-injection-22ecedeb.yml +0 -34
  151. package/bundled-rules/sigma-rules/auto-generated/command-injection-24baa0ae.yml +0 -33
  152. package/bundled-rules/sigma-rules/auto-generated/command-injection-256ecb74.yml +0 -33
  153. package/bundled-rules/sigma-rules/auto-generated/command-injection-25bd2efe.yml +0 -34
  154. package/bundled-rules/sigma-rules/auto-generated/command-injection-25c6aeb7.yml +0 -33
  155. package/bundled-rules/sigma-rules/auto-generated/command-injection-27a2a5df.yml +0 -33
  156. package/bundled-rules/sigma-rules/auto-generated/command-injection-282267f9.yml +0 -33
  157. package/bundled-rules/sigma-rules/auto-generated/command-injection-2b2b3747.yml +0 -34
  158. package/bundled-rules/sigma-rules/auto-generated/command-injection-2c99fa05.yml +0 -33
  159. package/bundled-rules/sigma-rules/auto-generated/command-injection-2e2e2e02.yml +0 -34
  160. package/bundled-rules/sigma-rules/auto-generated/command-injection-2f00759d.yml +0 -34
  161. package/bundled-rules/sigma-rules/auto-generated/command-injection-31879597.yml +0 -33
  162. package/bundled-rules/sigma-rules/auto-generated/command-injection-3301a600.yml +0 -33
  163. package/bundled-rules/sigma-rules/auto-generated/command-injection-389aacd4.yml +0 -33
  164. package/bundled-rules/sigma-rules/auto-generated/command-injection-39971646.yml +0 -33
  165. package/bundled-rules/sigma-rules/auto-generated/command-injection-3a8d0580.yml +0 -33
  166. package/bundled-rules/sigma-rules/auto-generated/command-injection-3bdcabe7.yml +0 -34
  167. package/bundled-rules/sigma-rules/auto-generated/command-injection-3e84ee4e.yml +0 -33
  168. package/bundled-rules/sigma-rules/auto-generated/command-injection-405501b3.yml +0 -34
  169. package/bundled-rules/sigma-rules/auto-generated/command-injection-4125f348.yml +0 -33
  170. package/bundled-rules/sigma-rules/auto-generated/command-injection-41778138.yml +0 -34
  171. package/bundled-rules/sigma-rules/auto-generated/command-injection-42eac79d.yml +0 -33
  172. package/bundled-rules/sigma-rules/auto-generated/command-injection-439aa913.yml +0 -33
  173. package/bundled-rules/sigma-rules/auto-generated/command-injection-439c24c2.yml +0 -34
  174. package/bundled-rules/sigma-rules/auto-generated/command-injection-445f7b15.yml +0 -33
  175. package/bundled-rules/sigma-rules/auto-generated/command-injection-46dd7c5d.yml +0 -33
  176. package/bundled-rules/sigma-rules/auto-generated/command-injection-47f12d88.yml +0 -33
  177. package/bundled-rules/sigma-rules/auto-generated/command-injection-4934a48a.yml +0 -37
  178. package/bundled-rules/sigma-rules/auto-generated/command-injection-49e18986.yml +0 -34
  179. package/bundled-rules/sigma-rules/auto-generated/command-injection-4b2afaf1.yml +0 -34
  180. package/bundled-rules/sigma-rules/auto-generated/command-injection-4caa5d95.yml +0 -33
  181. package/bundled-rules/sigma-rules/auto-generated/command-injection-4d4d059c.yml +0 -33
  182. package/bundled-rules/sigma-rules/auto-generated/command-injection-53f1019a.yml +0 -33
  183. package/bundled-rules/sigma-rules/auto-generated/command-injection-547096cc.yml +0 -34
  184. package/bundled-rules/sigma-rules/auto-generated/command-injection-58082bd6.yml +0 -33
  185. package/bundled-rules/sigma-rules/auto-generated/command-injection-5913cff2.yml +0 -33
  186. package/bundled-rules/sigma-rules/auto-generated/command-injection-5c6724dc.yml +0 -37
  187. package/bundled-rules/sigma-rules/auto-generated/command-injection-5e87663b.yml +0 -34
  188. package/bundled-rules/sigma-rules/auto-generated/command-injection-606d29b9.yml +0 -33
  189. package/bundled-rules/sigma-rules/auto-generated/command-injection-615a8500.yml +0 -33
  190. package/bundled-rules/sigma-rules/auto-generated/command-injection-64513e90.yml +0 -34
  191. package/bundled-rules/sigma-rules/auto-generated/command-injection-6479e1f8.yml +0 -33
  192. package/bundled-rules/sigma-rules/auto-generated/command-injection-694a3155.yml +0 -34
  193. package/bundled-rules/sigma-rules/auto-generated/command-injection-6986f459.yml +0 -33
  194. package/bundled-rules/sigma-rules/auto-generated/command-injection-701cd005.yml +0 -33
  195. package/bundled-rules/sigma-rules/auto-generated/command-injection-705b7ddc.yml +0 -33
  196. package/bundled-rules/sigma-rules/auto-generated/command-injection-7540d6a2.yml +0 -34
  197. package/bundled-rules/sigma-rules/auto-generated/command-injection-7578a3f1.yml +0 -33
  198. package/bundled-rules/sigma-rules/auto-generated/command-injection-767ee7bf.yml +0 -33
  199. package/bundled-rules/sigma-rules/auto-generated/command-injection-76f4d848.yml +0 -34
  200. package/bundled-rules/sigma-rules/auto-generated/command-injection-77c52089.yml +0 -33
  201. package/bundled-rules/sigma-rules/auto-generated/command-injection-785b27dc.yml +0 -33
  202. package/bundled-rules/sigma-rules/auto-generated/command-injection-789bc8e8.yml +0 -33
  203. package/bundled-rules/sigma-rules/auto-generated/command-injection-78e838c0.yml +0 -33
  204. package/bundled-rules/sigma-rules/auto-generated/command-injection-7b13727a.yml +0 -33
  205. package/bundled-rules/sigma-rules/auto-generated/command-injection-7b6b35f9.yml +0 -33
  206. package/bundled-rules/sigma-rules/auto-generated/command-injection-7be9aa34.yml +0 -33
  207. package/bundled-rules/sigma-rules/auto-generated/command-injection-7ce9773d.yml +0 -33
  208. package/bundled-rules/sigma-rules/auto-generated/command-injection-7d255250.yml +0 -32
  209. package/bundled-rules/sigma-rules/auto-generated/command-injection-7d2e697b.yml +0 -34
  210. package/bundled-rules/sigma-rules/auto-generated/command-injection-7d9e1c44.yml +0 -33
  211. package/bundled-rules/sigma-rules/auto-generated/command-injection-801b1ea0.yml +0 -33
  212. package/bundled-rules/sigma-rules/auto-generated/command-injection-80237d88.yml +0 -33
  213. package/bundled-rules/sigma-rules/auto-generated/command-injection-84146bbe.yml +0 -33
  214. package/bundled-rules/sigma-rules/auto-generated/command-injection-854bf852.yml +0 -33
  215. package/bundled-rules/sigma-rules/auto-generated/command-injection-87abfc75.yml +0 -33
  216. package/bundled-rules/sigma-rules/auto-generated/command-injection-88ac6c67.yml +0 -33
  217. package/bundled-rules/sigma-rules/auto-generated/command-injection-8971aea2.yml +0 -33
  218. package/bundled-rules/sigma-rules/auto-generated/command-injection-8a36aeab.yml +0 -34
  219. package/bundled-rules/sigma-rules/auto-generated/command-injection-8bea53a0.yml +0 -33
  220. package/bundled-rules/sigma-rules/auto-generated/command-injection-8c61719c.yml +0 -34
  221. package/bundled-rules/sigma-rules/auto-generated/command-injection-91a4d292.yml +0 -33
  222. package/bundled-rules/sigma-rules/auto-generated/command-injection-9a7c5141.yml +0 -33
  223. package/bundled-rules/sigma-rules/auto-generated/command-injection-9dcabe45.yml +0 -33
  224. package/bundled-rules/sigma-rules/auto-generated/command-injection-a00e7fab.yml +0 -34
  225. package/bundled-rules/sigma-rules/auto-generated/command-injection-a56d633b.yml +0 -33
  226. package/bundled-rules/sigma-rules/auto-generated/command-injection-a58e9280.yml +0 -34
  227. package/bundled-rules/sigma-rules/auto-generated/command-injection-a76d6236.yml +0 -33
  228. package/bundled-rules/sigma-rules/auto-generated/command-injection-a909099c.yml +0 -33
  229. package/bundled-rules/sigma-rules/auto-generated/command-injection-a9aeda43.yml +0 -34
  230. package/bundled-rules/sigma-rules/auto-generated/command-injection-ab88960f.yml +0 -33
  231. package/bundled-rules/sigma-rules/auto-generated/command-injection-ab9a6a29.yml +0 -33
  232. package/bundled-rules/sigma-rules/auto-generated/command-injection-b1135712.yml +0 -33
  233. package/bundled-rules/sigma-rules/auto-generated/command-injection-b23685a3.yml +0 -34
  234. package/bundled-rules/sigma-rules/auto-generated/command-injection-b3a260b5.yml +0 -33
  235. package/bundled-rules/sigma-rules/auto-generated/command-injection-b415ea95.yml +0 -34
  236. package/bundled-rules/sigma-rules/auto-generated/command-injection-b44fc412.yml +0 -33
  237. package/bundled-rules/sigma-rules/auto-generated/command-injection-b67ef9ae.yml +0 -34
  238. package/bundled-rules/sigma-rules/auto-generated/command-injection-bb7467e3.yml +0 -33
  239. package/bundled-rules/sigma-rules/auto-generated/command-injection-be26bbf9.yml +0 -33
  240. package/bundled-rules/sigma-rules/auto-generated/command-injection-bea1e186.yml +0 -33
  241. package/bundled-rules/sigma-rules/auto-generated/command-injection-bee27591.yml +0 -33
  242. package/bundled-rules/sigma-rules/auto-generated/command-injection-c0d169f4.yml +0 -33
  243. package/bundled-rules/sigma-rules/auto-generated/command-injection-c1429b8a.yml +0 -33
  244. package/bundled-rules/sigma-rules/auto-generated/command-injection-c35202ab.yml +0 -33
  245. package/bundled-rules/sigma-rules/auto-generated/command-injection-c5fa17de.yml +0 -34
  246. package/bundled-rules/sigma-rules/auto-generated/command-injection-c77d1205.yml +0 -34
  247. package/bundled-rules/sigma-rules/auto-generated/command-injection-d20ff181.yml +0 -34
  248. package/bundled-rules/sigma-rules/auto-generated/command-injection-d2b2c47a.yml +0 -33
  249. package/bundled-rules/sigma-rules/auto-generated/command-injection-d2ea50c9.yml +0 -33
  250. package/bundled-rules/sigma-rules/auto-generated/command-injection-d5bb587d.yml +0 -33
  251. package/bundled-rules/sigma-rules/auto-generated/command-injection-d9724ebf.yml +0 -33
  252. package/bundled-rules/sigma-rules/auto-generated/command-injection-da7906d5.yml +0 -33
  253. package/bundled-rules/sigma-rules/auto-generated/command-injection-db923bd6.yml +0 -33
  254. package/bundled-rules/sigma-rules/auto-generated/command-injection-dc97961c.yml +0 -33
  255. package/bundled-rules/sigma-rules/auto-generated/command-injection-e47af373.yml +0 -33
  256. package/bundled-rules/sigma-rules/auto-generated/command-injection-e59c9fd6.yml +0 -33
  257. package/bundled-rules/sigma-rules/auto-generated/command-injection-e6305166.yml +0 -33
  258. package/bundled-rules/sigma-rules/auto-generated/command-injection-e692f110.yml +0 -33
  259. package/bundled-rules/sigma-rules/auto-generated/command-injection-e7561649.yml +0 -34
  260. package/bundled-rules/sigma-rules/auto-generated/command-injection-e8acd6e5.yml +0 -34
  261. package/bundled-rules/sigma-rules/auto-generated/command-injection-e90bce79.yml +0 -33
  262. package/bundled-rules/sigma-rules/auto-generated/command-injection-eb633a58.yml +0 -33
  263. package/bundled-rules/sigma-rules/auto-generated/command-injection-ede541e9.yml +0 -34
  264. package/bundled-rules/sigma-rules/auto-generated/command-injection-eecd41b6.yml +0 -34
  265. package/bundled-rules/sigma-rules/auto-generated/command-injection-ef94112f.yml +0 -33
  266. package/bundled-rules/sigma-rules/auto-generated/command-injection-f2d856ef.yml +0 -33
  267. package/bundled-rules/sigma-rules/auto-generated/command-injection-fd251129.yml +0 -33
  268. package/bundled-rules/sigma-rules/auto-generated/command-injection-fd858b65.yml +0 -34
  269. package/bundled-rules/sigma-rules/auto-generated/command-injection-fdbedfe1.yml +0 -33
  270. package/bundled-rules/sigma-rules/auto-generated/command-injection-ff8450c2.yml +0 -33
  271. package/bundled-rules/sigma-rules/auto-generated/deserialization-020bdb36.yml +0 -31
  272. package/bundled-rules/sigma-rules/auto-generated/deserialization-1d4b21fe.yml +0 -29
  273. package/bundled-rules/sigma-rules/auto-generated/deserialization-22bf04f6.yml +0 -30
  274. package/bundled-rules/sigma-rules/auto-generated/deserialization-233dc2d5.yml +0 -30
  275. package/bundled-rules/sigma-rules/auto-generated/deserialization-2b276aeb.yml +0 -31
  276. package/bundled-rules/sigma-rules/auto-generated/deserialization-38e9f4c9.yml +0 -30
  277. package/bundled-rules/sigma-rules/auto-generated/deserialization-39e97031.yml +0 -30
  278. package/bundled-rules/sigma-rules/auto-generated/deserialization-43816c70.yml +0 -30
  279. package/bundled-rules/sigma-rules/auto-generated/deserialization-4c88f42c.yml +0 -30
  280. package/bundled-rules/sigma-rules/auto-generated/deserialization-4d41006d.yml +0 -30
  281. package/bundled-rules/sigma-rules/auto-generated/deserialization-4e18b6fc.yml +0 -31
  282. package/bundled-rules/sigma-rules/auto-generated/deserialization-4fc32a3a.yml +0 -30
  283. package/bundled-rules/sigma-rules/auto-generated/deserialization-552ccecf.yml +0 -30
  284. package/bundled-rules/sigma-rules/auto-generated/deserialization-598e1872.yml +0 -30
  285. package/bundled-rules/sigma-rules/auto-generated/deserialization-5ad40bc7.yml +0 -30
  286. package/bundled-rules/sigma-rules/auto-generated/deserialization-653bb09d.yml +0 -29
  287. package/bundled-rules/sigma-rules/auto-generated/deserialization-695aa6d8.yml +0 -30
  288. package/bundled-rules/sigma-rules/auto-generated/deserialization-6b1caed0.yml +0 -30
  289. package/bundled-rules/sigma-rules/auto-generated/deserialization-714a6b2d.yml +0 -30
  290. package/bundled-rules/sigma-rules/auto-generated/deserialization-71fe2100.yml +0 -30
  291. package/bundled-rules/sigma-rules/auto-generated/deserialization-8f89e62a.yml +0 -31
  292. package/bundled-rules/sigma-rules/auto-generated/deserialization-907f9977.yml +0 -30
  293. package/bundled-rules/sigma-rules/auto-generated/deserialization-96165540.yml +0 -30
  294. package/bundled-rules/sigma-rules/auto-generated/deserialization-a47f0dc2.yml +0 -30
  295. package/bundled-rules/sigma-rules/auto-generated/deserialization-b3723d58.yml +0 -30
  296. package/bundled-rules/sigma-rules/auto-generated/deserialization-b4e8f19d.yml +0 -30
  297. package/bundled-rules/sigma-rules/auto-generated/deserialization-bb942c55.yml +0 -30
  298. package/bundled-rules/sigma-rules/auto-generated/deserialization-e9739f9a.yml +0 -31
  299. package/bundled-rules/sigma-rules/auto-generated/deserialization-ebc3cf71.yml +0 -30
  300. package/bundled-rules/sigma-rules/auto-generated/deserialization-edd90efc.yml +0 -30
  301. package/bundled-rules/sigma-rules/auto-generated/deserialization-ee42f7bb.yml +0 -30
  302. package/bundled-rules/sigma-rules/auto-generated/deserialization-f18bf98a.yml +0 -30
  303. package/bundled-rules/sigma-rules/auto-generated/deserialization-f4a2abfd.yml +0 -30
  304. package/bundled-rules/sigma-rules/auto-generated/file-upload-0540e34a.yml +0 -33
  305. package/bundled-rules/sigma-rules/auto-generated/file-upload-3c2785c0.yml +0 -32
  306. package/bundled-rules/sigma-rules/auto-generated/file-upload-3f91abe4.yml +0 -34
  307. package/bundled-rules/sigma-rules/auto-generated/file-upload-41242eb2.yml +0 -33
  308. package/bundled-rules/sigma-rules/auto-generated/file-upload-425435ad.yml +0 -37
  309. package/bundled-rules/sigma-rules/auto-generated/file-upload-4f0d9f9c.yml +0 -33
  310. package/bundled-rules/sigma-rules/auto-generated/file-upload-52c4553d.yml +0 -33
  311. package/bundled-rules/sigma-rules/auto-generated/file-upload-961c1ff6.yml +0 -34
  312. package/bundled-rules/sigma-rules/auto-generated/file-upload-9a960136.yml +0 -33
  313. package/bundled-rules/sigma-rules/auto-generated/file-upload-a011aaec.yml +0 -33
  314. package/bundled-rules/sigma-rules/auto-generated/file-upload-b0c12e08.yml +0 -33
  315. package/bundled-rules/sigma-rules/auto-generated/file-upload-c3407187.yml +0 -33
  316. package/bundled-rules/sigma-rules/auto-generated/file-upload-ce3414fa.yml +0 -33
  317. package/bundled-rules/sigma-rules/auto-generated/file-upload-e9b2aec2.yml +0 -33
  318. package/bundled-rules/sigma-rules/auto-generated/idor-0d595ff0.yml +0 -30
  319. package/bundled-rules/sigma-rules/auto-generated/idor-13ac93b6.yml +0 -30
  320. package/bundled-rules/sigma-rules/auto-generated/idor-1e071abf.yml +0 -30
  321. package/bundled-rules/sigma-rules/auto-generated/idor-31c8f4ff.yml +0 -30
  322. package/bundled-rules/sigma-rules/auto-generated/idor-3ab138af.yml +0 -29
  323. package/bundled-rules/sigma-rules/auto-generated/idor-3af6bc7b.yml +0 -29
  324. package/bundled-rules/sigma-rules/auto-generated/idor-51d17890.yml +0 -30
  325. package/bundled-rules/sigma-rules/auto-generated/idor-6222e61f.yml +0 -30
  326. package/bundled-rules/sigma-rules/auto-generated/idor-6997f187.yml +0 -30
  327. package/bundled-rules/sigma-rules/auto-generated/idor-6c20a64c.yml +0 -30
  328. package/bundled-rules/sigma-rules/auto-generated/idor-71dec8d6.yml +0 -30
  329. package/bundled-rules/sigma-rules/auto-generated/idor-742435ee.yml +0 -30
  330. package/bundled-rules/sigma-rules/auto-generated/idor-8b926322.yml +0 -30
  331. package/bundled-rules/sigma-rules/auto-generated/idor-9af66900.yml +0 -30
  332. package/bundled-rules/sigma-rules/auto-generated/idor-9e4daa75.yml +0 -29
  333. package/bundled-rules/sigma-rules/auto-generated/idor-a22eed69.yml +0 -30
  334. package/bundled-rules/sigma-rules/auto-generated/idor-bde1f1b4.yml +0 -30
  335. package/bundled-rules/sigma-rules/auto-generated/idor-c10a3f0b.yml +0 -30
  336. package/bundled-rules/sigma-rules/auto-generated/idor-cda6b9d9.yml +0 -29
  337. package/bundled-rules/sigma-rules/auto-generated/idor-d87ab272.yml +0 -29
  338. package/bundled-rules/sigma-rules/auto-generated/idor-dc7d8ce2.yml +0 -30
  339. package/bundled-rules/sigma-rules/auto-generated/idor-ef23476d.yml +0 -30
  340. package/bundled-rules/sigma-rules/auto-generated/idor-fe58fb79.yml +0 -30
  341. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-0c2cfaae.yml +0 -31
  342. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-0fb3614a.yml +0 -30
  343. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-113331d9.yml +0 -31
  344. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-23658a38.yml +0 -30
  345. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-307f795a.yml +0 -30
  346. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-33cfe63d.yml +0 -34
  347. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-34ea3e0d.yml +0 -34
  348. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-397c516e.yml +0 -31
  349. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-3eb28506.yml +0 -30
  350. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-448c4463.yml +0 -30
  351. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-4a5e7ab9.yml +0 -30
  352. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-4cc8371f.yml +0 -31
  353. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-4f164f69.yml +0 -31
  354. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-5ca4023f.yml +0 -29
  355. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-668a20c1.yml +0 -30
  356. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-66ca91d6.yml +0 -30
  357. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-70291d91.yml +0 -31
  358. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-707cf74d.yml +0 -30
  359. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-733ddaff.yml +0 -31
  360. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-85c2f361.yml +0 -31
  361. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-8b130c20.yml +0 -30
  362. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-8b5aea05.yml +0 -31
  363. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-91f58f71.yml +0 -30
  364. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-95986365.yml +0 -30
  365. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-9ffb9771.yml +0 -31
  366. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-a2790c52.yml +0 -30
  367. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-a631203f.yml +0 -31
  368. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-acd64119.yml +0 -31
  369. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-b1110f0f.yml +0 -30
  370. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-b18e89b9.yml +0 -30
  371. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-ba345f86.yml +0 -31
  372. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-c2b460d8.yml +0 -30
  373. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-c336d5f3.yml +0 -30
  374. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-c483f919.yml +0 -31
  375. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-e717f021.yml +0 -30
  376. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-f3cc6d1d.yml +0 -31
  377. package/bundled-rules/sigma-rules/auto-generated/information-disclosure-f933d96b.yml +0 -31
  378. package/bundled-rules/sigma-rules/auto-generated/open-redirect-3587b23b.yml +0 -28
  379. package/bundled-rules/sigma-rules/auto-generated/open-redirect-707748e6.yml +0 -29
  380. package/bundled-rules/sigma-rules/auto-generated/open-redirect-83c5ec37.yml +0 -29
  381. package/bundled-rules/sigma-rules/auto-generated/open-redirect-9c5a1730.yml +0 -28
  382. package/bundled-rules/sigma-rules/auto-generated/open-redirect-c9b9a0ce.yml +0 -27
  383. package/bundled-rules/sigma-rules/auto-generated/open-redirect-f3348dbb.yml +0 -29
  384. package/bundled-rules/sigma-rules/auto-generated/open-redirect-fe767343.yml +0 -29
  385. package/bundled-rules/sigma-rules/auto-generated/path-traversal-0134dedd.yml +0 -32
  386. package/bundled-rules/sigma-rules/auto-generated/path-traversal-01def89d.yml +0 -32
  387. package/bundled-rules/sigma-rules/auto-generated/path-traversal-02fc2412.yml +0 -32
  388. package/bundled-rules/sigma-rules/auto-generated/path-traversal-0680a80c.yml +0 -33
  389. package/bundled-rules/sigma-rules/auto-generated/path-traversal-074b1e83.yml +0 -33
  390. package/bundled-rules/sigma-rules/auto-generated/path-traversal-075f9810.yml +0 -32
  391. package/bundled-rules/sigma-rules/auto-generated/path-traversal-0933813f.yml +0 -32
  392. package/bundled-rules/sigma-rules/auto-generated/path-traversal-177ef252.yml +0 -32
  393. package/bundled-rules/sigma-rules/auto-generated/path-traversal-1a027479.yml +0 -32
  394. package/bundled-rules/sigma-rules/auto-generated/path-traversal-1a538e86.yml +0 -32
  395. package/bundled-rules/sigma-rules/auto-generated/path-traversal-1e8f03b5.yml +0 -33
  396. package/bundled-rules/sigma-rules/auto-generated/path-traversal-2aac6249.yml +0 -32
  397. package/bundled-rules/sigma-rules/auto-generated/path-traversal-2bfd830c.yml +0 -32
  398. package/bundled-rules/sigma-rules/auto-generated/path-traversal-2d756d9c.yml +0 -32
  399. package/bundled-rules/sigma-rules/auto-generated/path-traversal-312356d9.yml +0 -32
  400. package/bundled-rules/sigma-rules/auto-generated/path-traversal-324e06ed.yml +0 -32
  401. package/bundled-rules/sigma-rules/auto-generated/path-traversal-3592dc14.yml +0 -33
  402. package/bundled-rules/sigma-rules/auto-generated/path-traversal-401b9477.yml +0 -33
  403. package/bundled-rules/sigma-rules/auto-generated/path-traversal-407fcfa5.yml +0 -33
  404. package/bundled-rules/sigma-rules/auto-generated/path-traversal-45860981.yml +0 -32
  405. package/bundled-rules/sigma-rules/auto-generated/path-traversal-4af16c70.yml +0 -32
  406. package/bundled-rules/sigma-rules/auto-generated/path-traversal-5089220f.yml +0 -33
  407. package/bundled-rules/sigma-rules/auto-generated/path-traversal-51153e8b.yml +0 -33
  408. package/bundled-rules/sigma-rules/auto-generated/path-traversal-51610460.yml +0 -33
  409. package/bundled-rules/sigma-rules/auto-generated/path-traversal-519bddf2.yml +0 -33
  410. package/bundled-rules/sigma-rules/auto-generated/path-traversal-5688190f.yml +0 -32
  411. package/bundled-rules/sigma-rules/auto-generated/path-traversal-5768227f.yml +0 -32
  412. package/bundled-rules/sigma-rules/auto-generated/path-traversal-598d6cd9.yml +0 -32
  413. package/bundled-rules/sigma-rules/auto-generated/path-traversal-59d3dc24.yml +0 -33
  414. package/bundled-rules/sigma-rules/auto-generated/path-traversal-621e9bfa.yml +0 -32
  415. package/bundled-rules/sigma-rules/auto-generated/path-traversal-68c7bea8.yml +0 -33
  416. package/bundled-rules/sigma-rules/auto-generated/path-traversal-6ff7dd35.yml +0 -32
  417. package/bundled-rules/sigma-rules/auto-generated/path-traversal-714bf167.yml +0 -32
  418. package/bundled-rules/sigma-rules/auto-generated/path-traversal-75db3810.yml +0 -32
  419. package/bundled-rules/sigma-rules/auto-generated/path-traversal-762efbc9.yml +0 -33
  420. package/bundled-rules/sigma-rules/auto-generated/path-traversal-77f64705.yml +0 -33
  421. package/bundled-rules/sigma-rules/auto-generated/path-traversal-7bf12581.yml +0 -33
  422. package/bundled-rules/sigma-rules/auto-generated/path-traversal-7f11b0d1.yml +0 -33
  423. package/bundled-rules/sigma-rules/auto-generated/path-traversal-7f83bac0.yml +0 -33
  424. package/bundled-rules/sigma-rules/auto-generated/path-traversal-7fe47ed2.yml +0 -32
  425. package/bundled-rules/sigma-rules/auto-generated/path-traversal-85142fbb.yml +0 -32
  426. package/bundled-rules/sigma-rules/auto-generated/path-traversal-8ddf496b.yml +0 -32
  427. package/bundled-rules/sigma-rules/auto-generated/path-traversal-8f4c7f3f.yml +0 -33
  428. package/bundled-rules/sigma-rules/auto-generated/path-traversal-92a9a648.yml +0 -32
  429. package/bundled-rules/sigma-rules/auto-generated/path-traversal-950d10c6.yml +0 -33
  430. package/bundled-rules/sigma-rules/auto-generated/path-traversal-95585823.yml +0 -32
  431. package/bundled-rules/sigma-rules/auto-generated/path-traversal-9b8c4cd5.yml +0 -33
  432. package/bundled-rules/sigma-rules/auto-generated/path-traversal-9c95efee.yml +0 -32
  433. package/bundled-rules/sigma-rules/auto-generated/path-traversal-a16ba6d6.yml +0 -33
  434. package/bundled-rules/sigma-rules/auto-generated/path-traversal-a195f003.yml +0 -33
  435. package/bundled-rules/sigma-rules/auto-generated/path-traversal-a545772f.yml +0 -32
  436. package/bundled-rules/sigma-rules/auto-generated/path-traversal-ab6d4242.yml +0 -32
  437. package/bundled-rules/sigma-rules/auto-generated/path-traversal-acd4da74.yml +0 -33
  438. package/bundled-rules/sigma-rules/auto-generated/path-traversal-ad6dc18c.yml +0 -32
  439. package/bundled-rules/sigma-rules/auto-generated/path-traversal-aef21f28.yml +0 -32
  440. package/bundled-rules/sigma-rules/auto-generated/path-traversal-ba468813.yml +0 -33
  441. package/bundled-rules/sigma-rules/auto-generated/path-traversal-c2194df8.yml +0 -33
  442. package/bundled-rules/sigma-rules/auto-generated/path-traversal-c311c71f.yml +0 -32
  443. package/bundled-rules/sigma-rules/auto-generated/path-traversal-c50d056f.yml +0 -33
  444. package/bundled-rules/sigma-rules/auto-generated/path-traversal-c83fe33e.yml +0 -32
  445. package/bundled-rules/sigma-rules/auto-generated/path-traversal-cbc4a350.yml +0 -32
  446. package/bundled-rules/sigma-rules/auto-generated/path-traversal-cd35d87f.yml +0 -31
  447. package/bundled-rules/sigma-rules/auto-generated/path-traversal-cf854f5c.yml +0 -33
  448. package/bundled-rules/sigma-rules/auto-generated/path-traversal-d2e70938.yml +0 -33
  449. package/bundled-rules/sigma-rules/auto-generated/path-traversal-d3f875d2.yml +0 -33
  450. package/bundled-rules/sigma-rules/auto-generated/path-traversal-d4185585.yml +0 -32
  451. package/bundled-rules/sigma-rules/auto-generated/path-traversal-d6bd80d4.yml +0 -32
  452. package/bundled-rules/sigma-rules/auto-generated/path-traversal-d6d9ef47.yml +0 -33
  453. package/bundled-rules/sigma-rules/auto-generated/path-traversal-d70f1769.yml +0 -33
  454. package/bundled-rules/sigma-rules/auto-generated/path-traversal-dcd510d2.yml +0 -33
  455. package/bundled-rules/sigma-rules/auto-generated/path-traversal-dcd893b1.yml +0 -32
  456. package/bundled-rules/sigma-rules/auto-generated/path-traversal-e0de5670.yml +0 -33
  457. package/bundled-rules/sigma-rules/auto-generated/path-traversal-e2932a2b.yml +0 -32
  458. package/bundled-rules/sigma-rules/auto-generated/path-traversal-e522e7da.yml +0 -33
  459. package/bundled-rules/sigma-rules/auto-generated/path-traversal-e8488ccc.yml +0 -31
  460. package/bundled-rules/sigma-rules/auto-generated/path-traversal-e99ac225.yml +0 -33
  461. package/bundled-rules/sigma-rules/auto-generated/path-traversal-ea081abf.yml +0 -32
  462. package/bundled-rules/sigma-rules/auto-generated/path-traversal-ea7049b4.yml +0 -33
  463. package/bundled-rules/sigma-rules/auto-generated/path-traversal-eb1ee0b9.yml +0 -33
  464. package/bundled-rules/sigma-rules/auto-generated/path-traversal-ebe846e0.yml +0 -33
  465. package/bundled-rules/sigma-rules/auto-generated/path-traversal-ebfee8c4.yml +0 -32
  466. package/bundled-rules/sigma-rules/auto-generated/path-traversal-ef92a1f5.yml +0 -32
  467. package/bundled-rules/sigma-rules/auto-generated/path-traversal-f0fa97af.yml +0 -33
  468. package/bundled-rules/sigma-rules/auto-generated/path-traversal-f20107a7.yml +0 -33
  469. package/bundled-rules/sigma-rules/auto-generated/path-traversal-f28974bc.yml +0 -33
  470. package/bundled-rules/sigma-rules/auto-generated/path-traversal-f4dcf5d6.yml +0 -32
  471. package/bundled-rules/sigma-rules/auto-generated/path-traversal-f5e9f08b.yml +0 -33
  472. package/bundled-rules/sigma-rules/auto-generated/path-traversal-f65ac6e1.yml +0 -32
  473. package/bundled-rules/sigma-rules/auto-generated/path-traversal-f6aaa151.yml +0 -32
  474. package/bundled-rules/sigma-rules/auto-generated/path-traversal-fdf57346.yml +0 -32
  475. package/bundled-rules/sigma-rules/auto-generated/path-traversal-fdf8800a.yml +0 -32
  476. package/bundled-rules/sigma-rules/auto-generated/path-traversal-ff4b15ca.yml +0 -32
  477. package/bundled-rules/sigma-rules/auto-generated/sqli-19dfac97.yml +0 -32
  478. package/bundled-rules/sigma-rules/auto-generated/sqli-1b41874d.yml +0 -32
  479. package/bundled-rules/sigma-rules/auto-generated/sqli-1e8f1c5a.yml +0 -32
  480. package/bundled-rules/sigma-rules/auto-generated/sqli-23be78c7.yml +0 -32
  481. package/bundled-rules/sigma-rules/auto-generated/sqli-35d4bbb6.yml +0 -32
  482. package/bundled-rules/sigma-rules/auto-generated/sqli-3b577514.yml +0 -32
  483. package/bundled-rules/sigma-rules/auto-generated/sqli-3d4905ab.yml +0 -31
  484. package/bundled-rules/sigma-rules/auto-generated/sqli-4a98e459.yml +0 -32
  485. package/bundled-rules/sigma-rules/auto-generated/sqli-4caa41ad.yml +0 -33
  486. package/bundled-rules/sigma-rules/auto-generated/sqli-5624d62d.yml +0 -32
  487. package/bundled-rules/sigma-rules/auto-generated/sqli-5686bd46.yml +0 -33
  488. package/bundled-rules/sigma-rules/auto-generated/sqli-65b70af5.yml +0 -33
  489. package/bundled-rules/sigma-rules/auto-generated/sqli-67e16bd4.yml +0 -32
  490. package/bundled-rules/sigma-rules/auto-generated/sqli-683d742c.yml +0 -32
  491. package/bundled-rules/sigma-rules/auto-generated/sqli-6cad1f41.yml +0 -32
  492. package/bundled-rules/sigma-rules/auto-generated/sqli-7bae5a5d.yml +0 -31
  493. package/bundled-rules/sigma-rules/auto-generated/sqli-7f116375.yml +0 -32
  494. package/bundled-rules/sigma-rules/auto-generated/sqli-8a7cfde6.yml +0 -32
  495. package/bundled-rules/sigma-rules/auto-generated/sqli-8d65ff6d.yml +0 -32
  496. package/bundled-rules/sigma-rules/auto-generated/sqli-9afdaba5.yml +0 -32
  497. package/bundled-rules/sigma-rules/auto-generated/sqli-b0b913bd.yml +0 -33
  498. package/bundled-rules/sigma-rules/auto-generated/sqli-b11aa59e.yml +0 -33
  499. package/bundled-rules/sigma-rules/auto-generated/sqli-b2af7b55.yml +0 -32
  500. package/bundled-rules/sigma-rules/auto-generated/sqli-b416fb55.yml +0 -32
  501. package/bundled-rules/sigma-rules/auto-generated/sqli-b94b78e3.yml +0 -33
  502. package/bundled-rules/sigma-rules/auto-generated/sqli-be106e71.yml +0 -33
  503. package/bundled-rules/sigma-rules/auto-generated/sqli-bf0caccd.yml +0 -33
  504. package/bundled-rules/sigma-rules/auto-generated/sqli-bfffdf4b.yml +0 -32
  505. package/bundled-rules/sigma-rules/auto-generated/sqli-c908d124.yml +0 -32
  506. package/bundled-rules/sigma-rules/auto-generated/sqli-cc3dd488.yml +0 -32
  507. package/bundled-rules/sigma-rules/auto-generated/sqli-cfe39537.yml +0 -32
  508. package/bundled-rules/sigma-rules/auto-generated/sqli-d1c3220e.yml +0 -32
  509. package/bundled-rules/sigma-rules/auto-generated/sqli-d2d09846.yml +0 -32
  510. package/bundled-rules/sigma-rules/auto-generated/sqli-d9a18b81.yml +0 -32
  511. package/bundled-rules/sigma-rules/auto-generated/sqli-e465adf1.yml +0 -32
  512. package/bundled-rules/sigma-rules/auto-generated/sqli-e4eb5d6d.yml +0 -32
  513. package/bundled-rules/sigma-rules/auto-generated/sqli-eec9cffc.yml +0 -32
  514. package/bundled-rules/sigma-rules/auto-generated/sqli-f0f9d121.yml +0 -32
  515. package/bundled-rules/sigma-rules/auto-generated/sqli-f289000c.yml +0 -32
  516. package/bundled-rules/sigma-rules/auto-generated/sqli-f788f751.yml +0 -33
  517. package/bundled-rules/sigma-rules/auto-generated/ssrf-00ae35c6.yml +0 -33
  518. package/bundled-rules/sigma-rules/auto-generated/ssrf-016ea544.yml +0 -35
  519. package/bundled-rules/sigma-rules/auto-generated/ssrf-07d8c729.yml +0 -35
  520. package/bundled-rules/sigma-rules/auto-generated/ssrf-09c81b6a.yml +0 -33
  521. package/bundled-rules/sigma-rules/auto-generated/ssrf-16b94ee0.yml +0 -35
  522. package/bundled-rules/sigma-rules/auto-generated/ssrf-1815e00b.yml +0 -35
  523. package/bundled-rules/sigma-rules/auto-generated/ssrf-1935a79a.yml +0 -35
  524. package/bundled-rules/sigma-rules/auto-generated/ssrf-1e4da2f1.yml +0 -35
  525. package/bundled-rules/sigma-rules/auto-generated/ssrf-2ebcdf25.yml +0 -35
  526. package/bundled-rules/sigma-rules/auto-generated/ssrf-2f968702.yml +0 -34
  527. package/bundled-rules/sigma-rules/auto-generated/ssrf-343b5e41.yml +0 -35
  528. package/bundled-rules/sigma-rules/auto-generated/ssrf-358214d1.yml +0 -35
  529. package/bundled-rules/sigma-rules/auto-generated/ssrf-366be59d.yml +0 -35
  530. package/bundled-rules/sigma-rules/auto-generated/ssrf-36bd4777.yml +0 -35
  531. package/bundled-rules/sigma-rules/auto-generated/ssrf-483e525f.yml +0 -35
  532. package/bundled-rules/sigma-rules/auto-generated/ssrf-49a097a8.yml +0 -35
  533. package/bundled-rules/sigma-rules/auto-generated/ssrf-5e0eff26.yml +0 -35
  534. package/bundled-rules/sigma-rules/auto-generated/ssrf-7077e8fa.yml +0 -35
  535. package/bundled-rules/sigma-rules/auto-generated/ssrf-70fdb2cd.yml +0 -35
  536. package/bundled-rules/sigma-rules/auto-generated/ssrf-73e7995c.yml +0 -34
  537. package/bundled-rules/sigma-rules/auto-generated/ssrf-7a58b206.yml +0 -34
  538. package/bundled-rules/sigma-rules/auto-generated/ssrf-7ce75b91.yml +0 -34
  539. package/bundled-rules/sigma-rules/auto-generated/ssrf-84d3755e.yml +0 -35
  540. package/bundled-rules/sigma-rules/auto-generated/ssrf-9b123631.yml +0 -34
  541. package/bundled-rules/sigma-rules/auto-generated/ssrf-9f94f916.yml +0 -35
  542. package/bundled-rules/sigma-rules/auto-generated/ssrf-b51bc3c2.yml +0 -34
  543. package/bundled-rules/sigma-rules/auto-generated/ssrf-bc20f525.yml +0 -35
  544. package/bundled-rules/sigma-rules/auto-generated/ssrf-cdc61dcd.yml +0 -35
  545. package/bundled-rules/sigma-rules/auto-generated/ssrf-e7d70aae.yml +0 -34
  546. package/bundled-rules/sigma-rules/auto-generated/ssrf-eab49130.yml +0 -35
  547. package/bundled-rules/sigma-rules/auto-generated/ssrf-efc68985.yml +0 -35
  548. package/bundled-rules/sigma-rules/auto-generated/ssrf-f1aeace6.yml +0 -35
  549. package/bundled-rules/sigma-rules/auto-generated/ssrf-f8f39001.yml +0 -34
  550. package/bundled-rules/sigma-rules/auto-generated/xss-01606bc8.yml +0 -39
  551. package/bundled-rules/sigma-rules/auto-generated/xss-0f5f70a8.yml +0 -38
  552. package/bundled-rules/sigma-rules/auto-generated/xss-0fb9f252.yml +0 -38
  553. package/bundled-rules/sigma-rules/auto-generated/xss-16524865.yml +0 -39
  554. package/bundled-rules/sigma-rules/auto-generated/xss-189723e0.yml +0 -38
  555. package/bundled-rules/sigma-rules/auto-generated/xss-1c2f1712.yml +0 -39
  556. package/bundled-rules/sigma-rules/auto-generated/xss-1ec71dde.yml +0 -39
  557. package/bundled-rules/sigma-rules/auto-generated/xss-1efa9c30.yml +0 -39
  558. package/bundled-rules/sigma-rules/auto-generated/xss-21e5eb26.yml +0 -39
  559. package/bundled-rules/sigma-rules/auto-generated/xss-23621a1c.yml +0 -39
  560. package/bundled-rules/sigma-rules/auto-generated/xss-27f10ee7.yml +0 -38
  561. package/bundled-rules/sigma-rules/auto-generated/xss-29df071e.yml +0 -38
  562. package/bundled-rules/sigma-rules/auto-generated/xss-2e4de213.yml +0 -38
  563. package/bundled-rules/sigma-rules/auto-generated/xss-2fd7b071.yml +0 -39
  564. package/bundled-rules/sigma-rules/auto-generated/xss-3097ef82.yml +0 -39
  565. package/bundled-rules/sigma-rules/auto-generated/xss-30e10280.yml +0 -37
  566. package/bundled-rules/sigma-rules/auto-generated/xss-319b5d4c.yml +0 -38
  567. package/bundled-rules/sigma-rules/auto-generated/xss-324461ad.yml +0 -38
  568. package/bundled-rules/sigma-rules/auto-generated/xss-34c0f631.yml +0 -38
  569. package/bundled-rules/sigma-rules/auto-generated/xss-376a26d0.yml +0 -38
  570. package/bundled-rules/sigma-rules/auto-generated/xss-3f6e9e38.yml +0 -38
  571. package/bundled-rules/sigma-rules/auto-generated/xss-44173677.yml +0 -38
  572. package/bundled-rules/sigma-rules/auto-generated/xss-442dc36b.yml +0 -39
  573. package/bundled-rules/sigma-rules/auto-generated/xss-46a6d330.yml +0 -39
  574. package/bundled-rules/sigma-rules/auto-generated/xss-50d4c136.yml +0 -39
  575. package/bundled-rules/sigma-rules/auto-generated/xss-5119be94.yml +0 -37
  576. package/bundled-rules/sigma-rules/auto-generated/xss-5138d9af.yml +0 -39
  577. package/bundled-rules/sigma-rules/auto-generated/xss-52259250.yml +0 -39
  578. package/bundled-rules/sigma-rules/auto-generated/xss-5a7b75a5.yml +0 -39
  579. package/bundled-rules/sigma-rules/auto-generated/xss-5da5c562.yml +0 -39
  580. package/bundled-rules/sigma-rules/auto-generated/xss-5e0acd20.yml +0 -39
  581. package/bundled-rules/sigma-rules/auto-generated/xss-5f2e1485.yml +0 -39
  582. package/bundled-rules/sigma-rules/auto-generated/xss-61bf8d4b.yml +0 -39
  583. package/bundled-rules/sigma-rules/auto-generated/xss-66cf0fa3.yml +0 -38
  584. package/bundled-rules/sigma-rules/auto-generated/xss-6c0a16b0.yml +0 -39
  585. package/bundled-rules/sigma-rules/auto-generated/xss-6e77e7db.yml +0 -38
  586. package/bundled-rules/sigma-rules/auto-generated/xss-75abec44.yml +0 -38
  587. package/bundled-rules/sigma-rules/auto-generated/xss-912198ad.yml +0 -38
  588. package/bundled-rules/sigma-rules/auto-generated/xss-919ce319.yml +0 -38
  589. package/bundled-rules/sigma-rules/auto-generated/xss-956d51c5.yml +0 -39
  590. package/bundled-rules/sigma-rules/auto-generated/xss-97a8015a.yml +0 -37
  591. package/bundled-rules/sigma-rules/auto-generated/xss-98d357f3.yml +0 -39
  592. package/bundled-rules/sigma-rules/auto-generated/xss-9b651733.yml +0 -38
  593. package/bundled-rules/sigma-rules/auto-generated/xss-9cdea131.yml +0 -39
  594. package/bundled-rules/sigma-rules/auto-generated/xss-9cf740eb.yml +0 -39
  595. package/bundled-rules/sigma-rules/auto-generated/xss-9e4f8557.yml +0 -38
  596. package/bundled-rules/sigma-rules/auto-generated/xss-a10a224f.yml +0 -39
  597. package/bundled-rules/sigma-rules/auto-generated/xss-a19cd758.yml +0 -39
  598. package/bundled-rules/sigma-rules/auto-generated/xss-a51a1104.yml +0 -39
  599. package/bundled-rules/sigma-rules/auto-generated/xss-ac094443.yml +0 -39
  600. package/bundled-rules/sigma-rules/auto-generated/xss-ae667fcd.yml +0 -39
  601. package/bundled-rules/sigma-rules/auto-generated/xss-af477c24.yml +0 -38
  602. package/bundled-rules/sigma-rules/auto-generated/xss-b1e89c09.yml +0 -38
  603. package/bundled-rules/sigma-rules/auto-generated/xss-b51d034c.yml +0 -39
  604. package/bundled-rules/sigma-rules/auto-generated/xss-b75a9bc6.yml +0 -39
  605. package/bundled-rules/sigma-rules/auto-generated/xss-b80267dd.yml +0 -39
  606. package/bundled-rules/sigma-rules/auto-generated/xss-b8dc3a4a.yml +0 -38
  607. package/bundled-rules/sigma-rules/auto-generated/xss-b999aeb5.yml +0 -38
  608. package/bundled-rules/sigma-rules/auto-generated/xss-bc5278bd.yml +0 -39
  609. package/bundled-rules/sigma-rules/auto-generated/xss-bd9710ff.yml +0 -39
  610. package/bundled-rules/sigma-rules/auto-generated/xss-c3560984.yml +0 -38
  611. package/bundled-rules/sigma-rules/auto-generated/xss-c5eb1dde.yml +0 -39
  612. package/bundled-rules/sigma-rules/auto-generated/xss-c85c6a04.yml +0 -38
  613. package/bundled-rules/sigma-rules/auto-generated/xss-c91ca363.yml +0 -38
  614. package/bundled-rules/sigma-rules/auto-generated/xss-cd0dd77b.yml +0 -39
  615. package/bundled-rules/sigma-rules/auto-generated/xss-cdc5ddc9.yml +0 -39
  616. package/bundled-rules/sigma-rules/auto-generated/xss-cdfd9e86.yml +0 -39
  617. package/bundled-rules/sigma-rules/auto-generated/xss-d41f9681.yml +0 -38
  618. package/bundled-rules/sigma-rules/auto-generated/xss-d76f5bb1.yml +0 -39
  619. package/bundled-rules/sigma-rules/auto-generated/xss-d9c2392d.yml +0 -38
  620. package/bundled-rules/sigma-rules/auto-generated/xss-dc0d3e3b.yml +0 -39
  621. package/bundled-rules/sigma-rules/auto-generated/xss-e0c75616.yml +0 -39
  622. package/bundled-rules/sigma-rules/auto-generated/xss-e24e73f9.yml +0 -39
  623. package/bundled-rules/sigma-rules/auto-generated/xss-e6e3094e.yml +0 -39
  624. package/bundled-rules/sigma-rules/auto-generated/xss-e95ff02e.yml +0 -39
  625. package/bundled-rules/sigma-rules/auto-generated/xss-eae4cb36.yml +0 -39
  626. package/bundled-rules/sigma-rules/auto-generated/xss-eb6c2227.yml +0 -39
  627. package/bundled-rules/sigma-rules/auto-generated/xss-f117429c.yml +0 -39
  628. package/bundled-rules/sigma-rules/auto-generated/xss-f53973c8.yml +0 -38
  629. package/bundled-rules/sigma-rules/auto-generated/xss-f6b89d1f.yml +0 -38
  630. package/bundled-rules/sigma-rules/auto-generated/xss-fd1134cb.yml +0 -38
  631. package/bundled-rules/sigma-rules/auto-generated/xss-fea47922.yml +0 -39
  632. package/bundled-rules/sigma-rules/auto-generated/xxe-0291de69.yml +0 -28
  633. package/bundled-rules/sigma-rules/auto-generated/xxe-10732b3f.yml +0 -28
  634. package/bundled-rules/sigma-rules/auto-generated/xxe-115dfd46.yml +0 -28
  635. package/bundled-rules/sigma-rules/auto-generated/xxe-2685c7c8.yml +0 -28
  636. package/bundled-rules/sigma-rules/auto-generated/xxe-296fcc81.yml +0 -28
  637. package/bundled-rules/sigma-rules/auto-generated/xxe-2a18b1d7.yml +0 -28
  638. package/bundled-rules/sigma-rules/auto-generated/xxe-2a74e50f.yml +0 -28
  639. package/bundled-rules/sigma-rules/auto-generated/xxe-2c11c12c.yml +0 -28
  640. package/bundled-rules/sigma-rules/auto-generated/xxe-3bf77c07.yml +0 -28
  641. package/bundled-rules/sigma-rules/auto-generated/xxe-3d897854.yml +0 -28
  642. package/bundled-rules/sigma-rules/auto-generated/xxe-3dba4046.yml +0 -28
  643. package/bundled-rules/sigma-rules/auto-generated/xxe-408fd30e.yml +0 -28
  644. package/bundled-rules/sigma-rules/auto-generated/xxe-448ec952.yml +0 -28
  645. package/bundled-rules/sigma-rules/auto-generated/xxe-499abe33.yml +0 -28
  646. package/bundled-rules/sigma-rules/auto-generated/xxe-5137adea.yml +0 -27
  647. package/bundled-rules/sigma-rules/auto-generated/xxe-518b805f.yml +0 -28
  648. package/bundled-rules/sigma-rules/auto-generated/xxe-52be17d9.yml +0 -28
  649. package/bundled-rules/sigma-rules/auto-generated/xxe-5a1aefac.yml +0 -28
  650. package/bundled-rules/sigma-rules/auto-generated/xxe-5d278c48.yml +0 -28
  651. package/bundled-rules/sigma-rules/auto-generated/xxe-6074a288.yml +0 -28
  652. package/bundled-rules/sigma-rules/auto-generated/xxe-6d5a0025.yml +0 -28
  653. package/bundled-rules/sigma-rules/auto-generated/xxe-6ea4eba9.yml +0 -28
  654. package/bundled-rules/sigma-rules/auto-generated/xxe-8817e845.yml +0 -28
  655. package/bundled-rules/sigma-rules/auto-generated/xxe-91325d0e.yml +0 -28
  656. package/bundled-rules/sigma-rules/auto-generated/xxe-a23a538e.yml +0 -27
  657. package/bundled-rules/sigma-rules/auto-generated/xxe-a2c36fd6.yml +0 -28
  658. package/bundled-rules/sigma-rules/auto-generated/xxe-a56af19a.yml +0 -28
  659. package/bundled-rules/sigma-rules/auto-generated/xxe-abec61f4.yml +0 -28
  660. package/bundled-rules/sigma-rules/auto-generated/xxe-b30924ad.yml +0 -28
  661. package/bundled-rules/sigma-rules/auto-generated/xxe-b52850cb.yml +0 -28
  662. package/bundled-rules/sigma-rules/auto-generated/xxe-be4027c2.yml +0 -28
  663. package/bundled-rules/sigma-rules/auto-generated/xxe-ce24d838.yml +0 -28
  664. package/bundled-rules/sigma-rules/auto-generated/xxe-dd7d0cc8.yml +0 -28
  665. package/bundled-rules/sigma-rules/auto-generated/xxe-e3ca9d19.yml +0 -28
  666. package/bundled-rules/sigma-rules/auto-generated/xxe-e7d11844.yml +0 -28
  667. package/bundled-rules/sigma-rules/auto-generated/xxe-e9fc5dce.yml +0 -28
  668. package/bundled-rules/sigma-rules/auto-generated/xxe-f3e972b5.yml +0 -28
  669. package/bundled-rules/sigma-rules/auto-generated/xxe-f9082757.yml +0 -28
  670. package/bundled-rules/sigma-rules/auto-generated/xxe-fb331fe1.yml +0 -28
  671. package/bundled-rules/sigma-rules/community/2010/Exploits/CVE-2010-5278/web_cve_2010_5278_exploitation_attempt.yml +0 -26
  672. package/bundled-rules/sigma-rules/community/2014/Exploits/CVE-2014-6287/web_cve_2014_6287_hfs_rce.yml +0 -40
  673. package/bundled-rules/sigma-rules/community/2014/TA/Axiom/proc_creation_win_apt_zxshell.yml +0 -31
  674. package/bundled-rules/sigma-rules/community/2014/TA/Turla/proc_creation_win_apt_turla_commands_critical.yml +0 -32
  675. package/bundled-rules/sigma-rules/community/2014/TA/Turla/proc_creation_win_apt_turla_comrat_may20.yml +0 -35
  676. package/bundled-rules/sigma-rules/community/2015/Exploits/CVE-2015-1641/proc_creation_win_exploit_cve_2015_1641.yml +0 -26
  677. package/bundled-rules/sigma-rules/community/2017/Exploits/CVE-2017-0261/proc_creation_win_exploit_cve_2017_0261.yml +0 -28
  678. package/bundled-rules/sigma-rules/community/2017/Exploits/CVE-2017-11882/proc_creation_win_exploit_cve_2017_11882.yml +0 -29
  679. package/bundled-rules/sigma-rules/community/2017/Exploits/CVE-2017-8759/proc_creation_win_exploit_cve_2017_8759.yml +0 -29
  680. package/bundled-rules/sigma-rules/community/2017/Malware/Adwind-RAT/proc_creation_win_malware_adwind.yml +0 -30
  681. package/bundled-rules/sigma-rules/community/2017/Malware/CosmicDuke/win_security_mal_cosmik_duke_persistence.yml +0 -33
  682. package/bundled-rules/sigma-rules/community/2017/Malware/Fireball/proc_creation_win_malware_fireball.yml +0 -27
  683. package/bundled-rules/sigma-rules/community/2017/Malware/Hancitor/proc_access_win_malware_verclsid_shellcode.yml +0 -33
  684. package/bundled-rules/sigma-rules/community/2017/Malware/NotPetya/proc_creation_win_malware_notpetya.yml +0 -38
  685. package/bundled-rules/sigma-rules/community/2017/Malware/PlugX/proc_creation_win_malware_plugx_susp_exe_locations.yml +0 -96
  686. package/bundled-rules/sigma-rules/community/2017/Malware/StoneDrill/win_system_apt_stonedrill.yml +0 -28
  687. package/bundled-rules/sigma-rules/community/2017/Malware/WannaCry/proc_creation_win_malware_wannacry.yml +0 -44
  688. package/bundled-rules/sigma-rules/community/2017/TA/APT10/proc_creation_win_apt_apt10_cloud_hopper.yml +0 -29
  689. package/bundled-rules/sigma-rules/community/2017/TA/Dragonfly/proc_creation_win_apt_ta17_293a_ps.yml +0 -27
  690. package/bundled-rules/sigma-rules/community/2017/TA/Equation-Group/net_firewall_apt_equationgroup_c2.yml +0 -30
  691. package/bundled-rules/sigma-rules/community/2017/TA/Lazarus/proc_creation_win_apt_lazarus_binary_masquerading.yml +0 -29
  692. package/bundled-rules/sigma-rules/community/2017/TA/Pandemic/registry_event_apt_pandemic.yml +0 -24
  693. package/bundled-rules/sigma-rules/community/2017/TA/Turla/pipe_created_apt_turla_named_pipes.yml +0 -31
  694. package/bundled-rules/sigma-rules/community/2017/TA/Turla/win_system_apt_carbonpaper_turla.yml +0 -30
  695. package/bundled-rules/sigma-rules/community/2017/TA/Turla/win_system_apt_turla_service_png.yml +0 -27
  696. package/bundled-rules/sigma-rules/community/2018/Exploits/CVE-2018-13379/web_cve_2018_13379_fortinet_preauth_read_exploit.yml +0 -25
  697. package/bundled-rules/sigma-rules/community/2018/Exploits/CVE-2018-15473/lnx_sshd_exploit_cve_2018_15473.yml +0 -24
  698. package/bundled-rules/sigma-rules/community/2018/Exploits/CVE-2018-2894/web_cve_2018_2894_weblogic_exploit.yml +0 -26
  699. package/bundled-rules/sigma-rules/community/2018/Malware/Elise-Backdoor/proc_creation_win_malware_elise.yml +0 -37
  700. package/bundled-rules/sigma-rules/community/2018/TA/APT27/proc_creation_win_apt_apt27_emissary_panda.yml +0 -33
  701. package/bundled-rules/sigma-rules/community/2018/TA/APT28/proc_creation_win_apt_sofacy.yml +0 -40
  702. package/bundled-rules/sigma-rules/community/2018/TA/APT29-CozyBear/file_event_win_apt_cozy_bear_phishing_campaign_indicators.yml +0 -30
  703. package/bundled-rules/sigma-rules/community/2018/TA/APT29-CozyBear/proc_creation_win_apt_apt29_phishing_campaign_indicators.yml +0 -32
  704. package/bundled-rules/sigma-rules/community/2018/TA/APT32-Oceanlotus/registry_event_apt_oceanlotus_registry.yml +0 -44
  705. package/bundled-rules/sigma-rules/community/2018/TA/MuddyWater/proc_creation_win_apt_muddywater_activity.yml +0 -40
  706. package/bundled-rules/sigma-rules/community/2018/TA/OilRig/proc_creation_win_apt_oilrig_mar18.yml +0 -54
  707. package/bundled-rules/sigma-rules/community/2018/TA/OilRig/registry_event_apt_oilrig_mar18.yml +0 -41
  708. package/bundled-rules/sigma-rules/community/2018/TA/OilRig/win_security_apt_oilrig_mar18.yml +0 -42
  709. package/bundled-rules/sigma-rules/community/2018/TA/OilRig/win_system_apt_oilrig_mar18.yml +0 -43
  710. package/bundled-rules/sigma-rules/community/2018/TA/Slingshot/proc_creation_win_apt_slingshot.yml +0 -32
  711. package/bundled-rules/sigma-rules/community/2018/TA/Slingshot/win_security_apt_slingshot.yml +0 -31
  712. package/bundled-rules/sigma-rules/community/2018/TA/TropicTrooper/proc_creation_win_apt_tropictrooper.yml +0 -21
  713. package/bundled-rules/sigma-rules/community/2019/Exploits/BearLPE-Exploit/proc_creation_win_exploit_other_bearlpe.yml +0 -33
  714. package/bundled-rules/sigma-rules/community/2019/Exploits/CVE-2019-0708/win_security_exploit_cve_2019_0708_scanner_poc.yml +0 -27
  715. package/bundled-rules/sigma-rules/community/2019/Exploits/CVE-2019-0708/win_system_exploit_cve_2019_0708.yml +0 -30
  716. package/bundled-rules/sigma-rules/community/2019/Exploits/CVE-2019-11510/web_cve_2019_11510_pulsesecure_exploit.yml +0 -23
  717. package/bundled-rules/sigma-rules/community/2019/Exploits/CVE-2019-1378/proc_creation_win_exploit_cve_2019_1378.yml +0 -41
  718. package/bundled-rules/sigma-rules/community/2019/Exploits/CVE-2019-1388/proc_creation_win_exploit_cve_2019_1388.yml +0 -34
  719. package/bundled-rules/sigma-rules/community/2019/Exploits/CVE-2019-14287/lnx_sudo_exploit_cve_2019_14287.yml +0 -33
  720. package/bundled-rules/sigma-rules/community/2019/Exploits/CVE-2019-14287/proc_creation_lnx_exploit_cve_2019_14287.yml +0 -28
  721. package/bundled-rules/sigma-rules/community/2019/Exploits/CVE-2019-19781/web_cve_2019_19781_citrix_exploit.yml +0 -33
  722. package/bundled-rules/sigma-rules/community/2019/Exploits/CVE-2019-3398/web_cve_2019_3398_confluence.yml +0 -26
  723. package/bundled-rules/sigma-rules/community/2019/Malware/BabyShark/proc_creation_win_malware_babyshark.yml +0 -34
  724. package/bundled-rules/sigma-rules/community/2019/Malware/Chafer/proxy_malware_chafer_url_pattern.yml +0 -22
  725. package/bundled-rules/sigma-rules/community/2019/Malware/Dridex/proc_creation_win_malware_dridex.yml +0 -51
  726. package/bundled-rules/sigma-rules/community/2019/Malware/Dtrack-RAT/proc_creation_win_malware_dtrack.yml +0 -34
  727. package/bundled-rules/sigma-rules/community/2019/Malware/Emotet/proc_creation_win_malware_emotet.yml +0 -44
  728. package/bundled-rules/sigma-rules/community/2019/Malware/Formbook/proc_creation_win_malware_formbook.yml +0 -50
  729. package/bundled-rules/sigma-rules/community/2019/Malware/LockerGoga/proc_creation_win_malware_lockergoga_ransomware.yml +0 -25
  730. package/bundled-rules/sigma-rules/community/2019/Malware/QBot/proc_creation_win_malware_qbot.yml +0 -32
  731. package/bundled-rules/sigma-rules/community/2019/Malware/Ryuk/proc_creation_win_malware_ryuk.yml +0 -50
  732. package/bundled-rules/sigma-rules/community/2019/Malware/Snatch/proc_creation_win_malware_snatch_ransomware.yml +0 -24
  733. package/bundled-rules/sigma-rules/community/2019/Malware/Ursnif/proxy_malware_ursnif_c2_url.yml +0 -32
  734. package/bundled-rules/sigma-rules/community/2019/Malware/Ursnif/proxy_malware_ursnif_download_url.yml +0 -26
  735. package/bundled-rules/sigma-rules/community/2019/Malware/Ursnif/registry_add_malware_ursnif.yml +0 -26
  736. package/bundled-rules/sigma-rules/community/2019/TA/APC-C-12/proc_creation_win_apt_aptc12_bluemushroom.yml +0 -27
  737. package/bundled-rules/sigma-rules/community/2019/TA/APT31/proc_creation_win_apt_apt31_judgement_panda.yml +0 -39
  738. package/bundled-rules/sigma-rules/community/2019/TA/APT40/proxy_apt_apt40_dropbox_tool_ua.yml +0 -25
  739. package/bundled-rules/sigma-rules/community/2019/TA/Bear-APT-Activity/proc_creation_win_apt_bear_activity_gtr19.yml +0 -31
  740. package/bundled-rules/sigma-rules/community/2019/TA/EmpireMonkey/proc_creation_win_apt_empiremonkey.yml +0 -26
  741. package/bundled-rules/sigma-rules/community/2019/TA/EquationGroup/proc_creation_win_apt_equationgroup_dll_u_load.yml +0 -28
  742. package/bundled-rules/sigma-rules/community/2019/TA/MustangPanda/proc_creation_win_apt_mustangpanda.yml +0 -36
  743. package/bundled-rules/sigma-rules/community/2019/TA/Operation-Wocao/README.md +0 -9
  744. package/bundled-rules/sigma-rules/community/2019/TA/Operation-Wocao/proc_creation_win_apt_wocao.yml +0 -46
  745. package/bundled-rules/sigma-rules/community/2019/TA/Operation-Wocao/win_security_apt_wocao.yml +0 -35
  746. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-0688/web_cve_2020_0688_exchange_exploit.yml +0 -26
  747. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-0688/web_cve_2020_0688_msexchange.yml +0 -28
  748. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-0688/win_vul_cve_2020_0688.yml +0 -29
  749. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-10148/web_cve_2020_10148_solarwinds_exploit.yml +0 -37
  750. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-10189/proc_creation_win_exploit_cve_2020_10189.yml +0 -39
  751. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-1048/proc_creation_win_exploit_cve_2020_1048.yml +0 -32
  752. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-1048/registry_set_exploit_cve_2020_1048_new_printer_port.yml +0 -37
  753. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-1350/proc_creation_win_exploit_cve_2020_1350.yml +0 -33
  754. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-1472/proc_creation_win_exploit_cve_2020_1472_zero_poc.yml +0 -38
  755. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-14882/web_cve_2020_14882_weblogic_exploit.yml +0 -27
  756. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-28188/web_cve_2020_28188_terramaster_rce_exploit.yml +0 -35
  757. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-3452/web_cve_2020_3452_cisco_asa_ftd.yml +0 -34
  758. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-5902/web_cve_2020_5902_f5_bigip.yml +0 -32
  759. package/bundled-rules/sigma-rules/community/2020/Exploits/CVE-2020-8193/web_cve_2020_8193_8195_citrix_exploit.yml +0 -31
  760. package/bundled-rules/sigma-rules/community/2020/Malware/Blue-Mockingbird/proc_creation_win_malware_blue_mockingbird.yml +0 -35
  761. package/bundled-rules/sigma-rules/community/2020/Malware/Blue-Mockingbird/registry_set_mal_blue_mockingbird.yml +0 -29
  762. package/bundled-rules/sigma-rules/community/2020/Malware/ComRAT/proxy_malware_comrat_network_indicators.yml +0 -24
  763. package/bundled-rules/sigma-rules/community/2020/Malware/Emotet/proc_creation_win_malware_emotet_rundll32_execution.yml +0 -37
  764. package/bundled-rules/sigma-rules/community/2020/Malware/FlowCloud/registry_event_malware_flowcloud_markers.yml +0 -30
  765. package/bundled-rules/sigma-rules/community/2020/Malware/Ke3chang-TidePool/proc_creation_win_malware_ke3chang_tidepool.yml +0 -33
  766. package/bundled-rules/sigma-rules/community/2020/Malware/Maze/proc_creation_win_malware_maze_ransomware.yml +0 -39
  767. package/bundled-rules/sigma-rules/community/2020/Malware/Trickbot/proc_creation_win_malware_trickbot_wermgr.yml +0 -29
  768. package/bundled-rules/sigma-rules/community/2020/TA/Evilnum/proc_creation_win_apt_evilnum_jul20.yml +0 -29
  769. package/bundled-rules/sigma-rules/community/2020/TA/GALLIUM/proc_creation_win_apt_gallium_iocs.yml +0 -65
  770. package/bundled-rules/sigma-rules/community/2020/TA/GALLIUM/win_dns_analytic_apt_gallium.yml +0 -37
  771. package/bundled-rules/sigma-rules/community/2020/TA/Greenbug/proc_creation_win_apt_greenbug_may20.yml +0 -52
  772. package/bundled-rules/sigma-rules/community/2020/TA/Lazarus/proc_creation_win_apt_lazarus_group_activity.yml +0 -60
  773. package/bundled-rules/sigma-rules/community/2020/TA/Leviathan/registry_event_apt_leviathan.yml +0 -22
  774. package/bundled-rules/sigma-rules/community/2020/TA/SolarWinds-Supply-Chain/README.md +0 -1
  775. package/bundled-rules/sigma-rules/community/2020/TA/SolarWinds-Supply-Chain/proc_creation_win_apt_unc2452_cmds.yml +0 -56
  776. package/bundled-rules/sigma-rules/community/2020/TA/SolarWinds-Supply-Chain/proc_creation_win_apt_unc2452_ps.yml +0 -33
  777. package/bundled-rules/sigma-rules/community/2020/TA/SolarWinds-Supply-Chain/proc_creation_win_apt_unc2452_vbscript_pattern.yml +0 -31
  778. package/bundled-rules/sigma-rules/community/2020/TA/SolarWinds-Supply-Chain/web_solarwinds_supernova_webshell.yml +0 -28
  779. package/bundled-rules/sigma-rules/community/2020/TA/TAIDOOR-RAT/proc_creation_win_apt_taidoor.yml +0 -31
  780. package/bundled-rules/sigma-rules/community/2020/TA/Winnti/proc_creation_win_apt_winnti_mal_hk_jan20.yml +0 -40
  781. package/bundled-rules/sigma-rules/community/2020/TA/Winnti/proc_creation_win_apt_winnti_pipemon.yml +0 -32
  782. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-1675/av_exploit_cve_2021_34527_print_nightmare.yml +0 -29
  783. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-1675/file_delete_win_exploit_cve_2021_1675_print_nightmare.yml +0 -28
  784. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-1675/file_event_win_exploit_cve_2021_1675_printspooler.yml +0 -28
  785. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-1675/image_load_exploit_cve_2021_1675_spoolsv_dll_load.yml +0 -33
  786. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-1675/registry_event_cve_2021_1675_mimikatz_printernightmare_drivers.yml +0 -44
  787. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-1675/win_exploit_cve_2021_1675_printspooler.yml +0 -42
  788. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-1675/win_exploit_cve_2021_1675_printspooler_operational.yml +0 -29
  789. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-1675/win_security_exploit_cve_2021_1675_printspooler_security.yml +0 -29
  790. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-1675/zeek_dce_rpc_exploit_cve_2021_1675_printnightmare_print_driver_install.yml +0 -41
  791. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-20090/web_cve_2021_20090_2021_20091_arcadyan_router_exploit.yml +0 -42
  792. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-2109/web_cve_2021_2109_weblogic_rce_exploit.yml +0 -28
  793. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-21972/web_cve_2021_21972_vsphere_unauth_rce_exploit.yml +0 -26
  794. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-21978/web_cve_2021_21978_vmware_view_planner_exploit.yml +0 -28
  795. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-22005/web_cve_2021_22005_vmware_file_upload.yml +0 -25
  796. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-22123/web_cve_2021_22123_fortinet_exploit.yml +0 -28
  797. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-22893/web_cve_2021_22893_pulse_secure_rce_exploit.yml +0 -37
  798. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-26084/proc_creation_win_exploit_cve_2021_26084_atlassian_confluence.yml +0 -42
  799. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-26084/web_cve_2021_26084_confluence_rce_exploit.yml +0 -37
  800. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-26814/web_cve_2021_26814_wzuh_rce.yml +0 -24
  801. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-26857/proc_creation_win_exploit_cve_2021_26857_msexchange.yml +0 -28
  802. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-26858/file_event_win_cve_2021_26858_msexchange.yml +0 -34
  803. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-26858/web_cve_2021_26858_iis_rce.yml +0 -38
  804. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-27905/web_cve_2021_27905_apache_solr_exploit.yml +0 -38
  805. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-28480/web_cve_2021_28480_exchange_exploit.yml +0 -26
  806. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-33766/web_cve_2021_33766_msexchange_proxytoken.yml +0 -32
  807. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-33771/file_event_win_cve_2021_31979_cve_2021_33771_exploits.yml +0 -40
  808. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-33771/registry_set_cve_2021_31979_cve_2021_33771_exploits.yml +0 -36
  809. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-35211/proc_creation_win_exploit_cve_2021_35211_servu.yml +0 -31
  810. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-38647/zeek_http_exploit_cve_2021_38647_omigod_no_auth_rce.yml +0 -49
  811. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-4034/lnx_auth_exploit_cve_2021_4034_pwnkit_lpe.yml +0 -28
  812. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-40444/file_event_win_exploit_cve_2021_40444.yml +0 -35
  813. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-40444/proc_creation_win_exploit_cve_2021_40444.yml +0 -34
  814. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-40444/proc_creation_win_exploit_cve_2021_40444_office_directory_traversal.yml +0 -37
  815. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-40539/web_cve_2021_40539_adselfservice.yml +0 -26
  816. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-40539/web_cve_2021_40539_manageengine_adselfservice_exploit.yml +0 -31
  817. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-41379/file_event_win_cve_2021_41379_msi_lpe.yml +0 -27
  818. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-41379/proc_creation_win_exploit_cve_2021_41379.yml +0 -39
  819. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-41379/win_vul_cve_2021_41379.yml +0 -26
  820. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-41773/web_cve_2021_41773_apache_path_traversal.yml +0 -42
  821. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-42237/web_cve_2021_42237_sitecore_report_ashx.yml +0 -26
  822. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-42278/win_system_exploit_cve_2021_42278.yml +0 -35
  823. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-42287/win_security_samaccountname_spoofing_cve_2021_42287.yml +0 -30
  824. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-42287/win_system_exploit_cve_2021_42287.yml +0 -33
  825. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-42321/win_exchange_cve_2021_42321.yml +0 -29
  826. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-43798/web_cve_2021_43798_grafana.yml +0 -79
  827. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-44077/file_event_win_cve_2021_44077_poc_default_files.yml +0 -23
  828. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-44228/proc_creation_win_exploit_cve_2021_44228_vmware_horizon_log4j.yml +0 -30
  829. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-44228/web_cve_2021_44228_log4j.yml +0 -52
  830. package/bundled-rules/sigma-rules/community/2021/Exploits/CVE-2021-44228/web_cve_2021_44228_log4j_fields.yml +0 -126
  831. package/bundled-rules/sigma-rules/community/2021/Exploits/ProxyShell-Exploit/web_exchange_proxyshell.yml +0 -41
  832. package/bundled-rules/sigma-rules/community/2021/Exploits/ProxyShell-Exploit/web_exchange_proxyshell_successful.yml +0 -33
  833. package/bundled-rules/sigma-rules/community/2021/Exploits/RazerInstaller-LPE-Exploit/proc_creation_win_exploit_other_razorinstaller_lpe.yml +0 -30
  834. package/bundled-rules/sigma-rules/community/2021/Exploits/SystemNightmare-Exploit/proc_creation_win_exploit_other_systemnightmare.yml +0 -26
  835. package/bundled-rules/sigma-rules/community/2021/Exploits/VisualDoor-Exploit/README.md +0 -9
  836. package/bundled-rules/sigma-rules/community/2021/Exploits/VisualDoor-Exploit/web_sonicwall_jarrewrite_exploit.yml +0 -27
  837. package/bundled-rules/sigma-rules/community/2021/Malware/BlackByte/proc_creation_win_malware_blackbyte_ransomware.yml +0 -35
  838. package/bundled-rules/sigma-rules/community/2021/Malware/BlackByte/registry_set_win_malware_blackbyte_privesc_registry.yml +0 -32
  839. package/bundled-rules/sigma-rules/community/2021/Malware/Conti/proc_creation_win_malware_conti.yml +0 -25
  840. package/bundled-rules/sigma-rules/community/2021/Malware/Conti/proc_creation_win_malware_conti_7zip.yml +0 -26
  841. package/bundled-rules/sigma-rules/community/2021/Malware/Conti/proc_creation_win_malware_conti_ransomware_commands.yml +0 -31
  842. package/bundled-rules/sigma-rules/community/2021/Malware/Conti/proc_creation_win_malware_conti_ransomware_database_dump.yml +0 -35
  843. package/bundled-rules/sigma-rules/community/2021/Malware/DarkSide/proc_creation_win_malware_darkside_ransomware.yml +0 -30
  844. package/bundled-rules/sigma-rules/community/2021/Malware/Devil-Bait/README.md +0 -15
  845. package/bundled-rules/sigma-rules/community/2021/Malware/Devil-Bait/file_event_win_malware_devil_bait_script_drop.yml +0 -31
  846. package/bundled-rules/sigma-rules/community/2021/Malware/Devil-Bait/proc_creation_win_malware_devil_bait_output_redirect.yml +0 -40
  847. package/bundled-rules/sigma-rules/community/2021/Malware/Devil-Bait/proxy_malware_devil_bait_c2_communication.yml +0 -25
  848. package/bundled-rules/sigma-rules/community/2021/Malware/FoggyWeb/image_load_malware_foggyweb_nobelium.yml +0 -23
  849. package/bundled-rules/sigma-rules/community/2021/Malware/Goofy-Guineapig/README.md +0 -17
  850. package/bundled-rules/sigma-rules/community/2021/Malware/Goofy-Guineapig/file_event_win_malware_goofy_guineapig_file_indicators.yml +0 -26
  851. package/bundled-rules/sigma-rules/community/2021/Malware/Goofy-Guineapig/proc_creation_win_malware_goofy_guineapig_broken_cmd.yml +0 -21
  852. package/bundled-rules/sigma-rules/community/2021/Malware/Goofy-Guineapig/proc_creation_win_malware_goofy_guineapig_googleupdate_uncommon_child_instance.yml +0 -27
  853. package/bundled-rules/sigma-rules/community/2021/Malware/Goofy-Guineapig/proxy_malware_goofy_gunieapig_c2_communication.yml +0 -21
  854. package/bundled-rules/sigma-rules/community/2021/Malware/Goofy-Guineapig/win_system_malware_goofy_guineapig_service_persistence.yml +0 -27
  855. package/bundled-rules/sigma-rules/community/2021/Malware/Moriya-Rootkit/file_event_win_moriya_rootkit.yml +0 -27
  856. package/bundled-rules/sigma-rules/community/2021/Malware/Netwire/registry_add_malware_netwire.yml +0 -29
  857. package/bundled-rules/sigma-rules/community/2021/Malware/Pingback/file_event_win_malware_pingback_backdoor.yml +0 -32
  858. package/bundled-rules/sigma-rules/community/2021/Malware/Pingback/image_load_malware_pingback_backdoor.yml +0 -32
  859. package/bundled-rules/sigma-rules/community/2021/Malware/Pingback/proc_creation_win_malware_pingback_backdoor.yml +0 -36
  860. package/bundled-rules/sigma-rules/community/2021/Malware/Small-Sieve/README.md +0 -16
  861. package/bundled-rules/sigma-rules/community/2021/Malware/Small-Sieve/file_event_win_malware_small_sieve_evasion_typo.yml +0 -31
  862. package/bundled-rules/sigma-rules/community/2021/Malware/Small-Sieve/proc_creation_win_malware_small_sieve_cli_arg.yml +0 -24
  863. package/bundled-rules/sigma-rules/community/2021/Malware/Small-Sieve/proxy_malware_small_sieve_telegram_communication.yml +0 -24
  864. package/bundled-rules/sigma-rules/community/2021/Malware/Small-Sieve/registry_set_malware_small_sieve_evasion_typo.yml +0 -25
  865. package/bundled-rules/sigma-rules/community/2021/TA/HAFNIUM/proc_creation_win_apt_hafnium.yml +0 -79
  866. package/bundled-rules/sigma-rules/community/2021/TA/HAFNIUM/web_exchange_exploitation_hafnium.yml +0 -65
  867. package/bundled-rules/sigma-rules/community/2021/TA/Kaseya-Supply-Chain/proc_creation_win_apt_revil_kaseya.yml +0 -46
  868. package/bundled-rules/sigma-rules/community/2021/TA/PRIVATELOG/image_load_usp_svchost_clfsw32.yml +0 -25
  869. package/bundled-rules/sigma-rules/community/2021/TA/SOURGUM/proc_creation_win_apt_sourgrum.yml +0 -40
  870. package/bundled-rules/sigma-rules/community/2021/TA/UNC2546/web_unc2546_dewmode_php_webshell.yml +0 -30
  871. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-21554/proc_creation_win_exploit_cve_2023_21554_queuejumper.yml +0 -35
  872. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-21587/web_cve_2022_21587_oracle_ebs.yml +0 -30
  873. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-21919/win_system_exploit_cve_2022_21919_or_cve_2021_34484.yml +0 -28
  874. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-22954/proc_creation_win_exploit_cve_2022_22954_vmware_workspace_one_rce.yml +0 -33
  875. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-24527/file_event_win_cve_2022_24527_lpe.yml +0 -28
  876. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-26134/proc_creation_lnx_exploit_cve_2022_26134_atlassian_confluence.yml +0 -41
  877. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-26809/proc_creation_win_exploit_cve_2022_26809_rpcss_child_process_anomaly.yml +0 -31
  878. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-27925/web_cve_2022_27925_exploit.yml +0 -38
  879. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-29072/proc_creation_win_exploit_cve_2022_29072_7zip.yml +0 -47
  880. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-29799/lnx_exploit_cve_2022_27999_cve_2022_27800.yml +0 -29
  881. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-30190/registry_set_exploit_cve_2022_30190_msdt_follina.yml +0 -24
  882. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-31656/web_cve_2022_31656_auth_bypass.yml +0 -26
  883. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-31659/web_cve_2022_31659_vmware_rce.yml +0 -25
  884. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-33891/proc_creation_lnx_exploit_cve_2022_33891_spark_shell_command_injection.yml +0 -28
  885. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-33891/web_cve_2022_33891_spark_shell_command_injection.yml +0 -25
  886. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-36804/web_cve_2022_36804_atlassian_bitbucket_command_injection.yml +0 -29
  887. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-37966/win_system_exploit_cve_2022_37966_kdcsvc_rc4_downgrade.yml +0 -27
  888. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-41082/proxy_cve_2022_36804_exchange_owassrf_exploitation.yml +0 -34
  889. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-41082/proxy_cve_2022_36804_exchange_owassrf_poc_exploitation.yml +0 -29
  890. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-41082/web_cve_2022_36804_exchange_owassrf_exploitation.yml +0 -35
  891. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-41082/web_cve_2022_36804_exchange_owassrf_poc_exploitation.yml +0 -30
  892. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-41120/proc_creation_win_exploit_cve_2022_41120_sysmon_eop.yml +0 -46
  893. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-42475/fortios_sslvpnd_exploit_cve_2022_42475_exploitation_indicators.yml +0 -32
  894. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-44877/web_cve_2022_44877_exploitation_attempt.yml +0 -38
  895. package/bundled-rules/sigma-rules/community/2022/Exploits/CVE-2022-46169/web_cve_2022_46169_cacti_exploitation_attempt.yml +0 -41
  896. package/bundled-rules/sigma-rules/community/2022/Malware/BlueSky-Ransomware/win_security_malware_bluesky_ransomware_files_indicators.yml +0 -32
  897. package/bundled-rules/sigma-rules/community/2022/Malware/Bumblebee/create_remote_thread_win_malware_bumblebee.yml +0 -28
  898. package/bundled-rules/sigma-rules/community/2022/Malware/ChromeLoader/proc_creation_win_malware_chrome_loader_execution.yml +0 -32
  899. package/bundled-rules/sigma-rules/community/2022/Malware/Emotet/proc_creation_win_malware_emotet_loader_execution.yml +0 -38
  900. package/bundled-rules/sigma-rules/community/2022/Malware/Hermetic-Wiper/proc_creation_win_malware_hermetic_wiper_activity.yml +0 -32
  901. package/bundled-rules/sigma-rules/community/2022/Malware/Raspberry-Robin/proc_creation_win_malware_raspberry_robin_execution.yml +0 -40
  902. package/bundled-rules/sigma-rules/community/2022/Malware/Raspberry-Robin/proc_creation_win_malware_raspberry_robin_external_drive_exec.yml +0 -40
  903. package/bundled-rules/sigma-rules/community/2022/Malware/Raspberry-Robin/proc_creation_win_malware_raspberry_robin_single_dot_ending_file.yml +0 -25
  904. package/bundled-rules/sigma-rules/community/2022/Malware/Serpent-Backdoor/proc_creation_win_malware_serpent_backdoor_payload_execution.yml +0 -37
  905. package/bundled-rules/sigma-rules/community/2022/Malware/SocGholish/proc_creation_win_malware_socgholish_fakeupdates_activity.yml +0 -40
  906. package/bundled-rules/sigma-rules/community/2022/Malware/win_mssql_sp_maggie.yml +0 -25
  907. package/bundled-rules/sigma-rules/community/2022/TA/ACTINIUM/proc_creation_win_apt_actinium_persistence.yml +0 -30
  908. package/bundled-rules/sigma-rules/community/2022/TA/MERCURY/proc_creation_win_apt_mercury.yml +0 -26
  909. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-1389/proxy_exploit_cve_2023_1389_unauth_command_injection_tplink_archer_ax21.yml +0 -33
  910. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-20198/cisco_syslog_cve_2023_20198_ios_xe_web_ui.yml +0 -30
  911. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-21554/win_cve_2023_21554_msmq_corrupted_packet.yml +0 -23
  912. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-22518/proc_creation_lnx_exploit_cve_2023_22518_confluence_java_child_proc.yml +0 -41
  913. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-22518/proc_creation_win_exploit_cve_2023_22518_confluence_tomcat_child_proc.yml +0 -43
  914. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-22518/proxy_exploit_cve_2023_22518_confluence_auth_bypass.yml +0 -42
  915. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-22518/web_exploit_cve_2023_22518_confluence_auth_bypass.yml +0 -42
  916. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-2283/lnx_sshd_exploit_cve_2023_2283_libssh_authentication_bypass.yml +0 -27
  917. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-23397/registry_set_exploit_cve_2023_23397_outlook_reminder_trigger.yml +0 -29
  918. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-23397/win_security_exploit_cve_2023_23397_outlook_remote_file_query.yml +0 -36
  919. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-23397/win_smbclient_connectivity_exploit_cve_2023_23397_outlook_remote_file.yml +0 -91
  920. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-23752/web_cve_2023_23752_joomla_exploit_attempt.yml +0 -26
  921. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-25157/web_cve_2023_25157_geoserver_sql_injection.yml +0 -46
  922. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-25717/web_cve_2023_25717_ruckus_wireless_admin_exploit_attempt.yml +0 -30
  923. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-27363/file_event_win_cve_2023_27363_foxit_rce.yml +0 -27
  924. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-27997/web_cve_2023_27997_pre_authentication_rce.yml +0 -34
  925. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-34362-MOVEit-Transfer-Exploit/README.md +0 -18
  926. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-34362-MOVEit-Transfer-Exploit/file_event_win_exploit_cve_2023_34362_moveit_transfer.yml +0 -64
  927. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-34362-MOVEit-Transfer-Exploit/proc_creation_win_exploit_cve_2023_34362_moveit_transfer_exploitation_activity.yml +0 -33
  928. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-34362-MOVEit-Transfer-Exploit/web_cve_2023_34362_known_payload_request.yml.yml +0 -27
  929. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-36874/file_event_win_exploit_cve_2023_36874_report_creation.yml +0 -32
  930. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-36874/file_event_win_exploit_cve_2023_36874_wermgr_creation.yml +0 -34
  931. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-36874/proc_creation_win_exploit_cve_2023_36874_fake_wermgr.yml +0 -27
  932. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-36884/file_event_win_exploit_cve_2023_36884_office_windows_html_rce_file_patterns.yml +0 -27
  933. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-36884/proxy_exploit_cve_2023_36884_office_windows_html_rce.yml +0 -23
  934. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-36884/proxy_exploit_cve_2023_36884_office_windows_html_rce_extenstion_ip_pattern_traffic.yml +0 -25
  935. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-36884/proxy_exploit_cve_2023_36884_office_windows_html_rce_traffic.yml +0 -33
  936. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-36884/proxy_exploit_cve_2023_36884_office_windows_html_rce_url_marker_traffic.yml +0 -22
  937. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-36884/win_security_exploit_cve_2023_36884_office_windows_html_rce_share_access_pattern.yml +0 -29
  938. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-38831/file_event_win_exploit_cve_2023_38331_winrar_susp_double_ext.yml +0 -28
  939. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-38831/proc_creation_win_exploit_cve_2023_38831_winrar_child_proc.yml +0 -46
  940. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-40477/file_event_win_exploit_cve_2023_40477_winrar_rev_file_abuse.yml +0 -27
  941. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-40477/win_application_exploit_cve_2023_40477_winrar_crash.yml +0 -34
  942. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-43261/proxy_exploit_cve_2023_43261_milesight_information_disclosure.yml +0 -33
  943. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-43261/web_exploit_cve_2023_43261_milesight_information_disclosure.yml +0 -34
  944. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-46214/web_cve_2023_46214_rce_splunk_enterprise.yml +0 -35
  945. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-46214/web_cve_2023_46214_rce_splunk_enterprise_poc.yml +0 -43
  946. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-46747/proxy_cve_2023_46747_f5_remote_code_execution.yml +0 -38
  947. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-46747/web_cve_2023_46747_f5_remote_code_execution.yml +0 -38
  948. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-4966/proxy_exploit_cve_2023_4966_citrix_sensitive_information_disclosure_exploit.yml +0 -35
  949. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-4966/proxy_exploit_cve_2023_4966_citrix_sensitive_information_disclosure_exploit_attempt.yml +0 -35
  950. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-4966/web_exploit_cve_2023_4966_citrix_sensitive_information_disclosure_exploit.yml +0 -35
  951. package/bundled-rules/sigma-rules/community/2023/Exploits/CVE-2023-4966/web_exploit_cve_2023_4966_citrix_sensitive_information_disclosure_exploit_attempt.yml +0 -35
  952. package/bundled-rules/sigma-rules/community/2023/Exploits/Windows-Server-Unknown-Exploit/proc_creation_win_exploit_other_win_server_undocumented_rce.yml +0 -31
  953. package/bundled-rules/sigma-rules/community/2023/Malware/COLDSTEEL/README.md +0 -20
  954. package/bundled-rules/sigma-rules/community/2023/Malware/COLDSTEEL/file_event_win_malware_coldsteel_renamed_cmd.yml +0 -22
  955. package/bundled-rules/sigma-rules/community/2023/Malware/COLDSTEEL/file_event_win_malware_coldsteel_service_dll_creation.yml +0 -23
  956. package/bundled-rules/sigma-rules/community/2023/Malware/COLDSTEEL/image_load_malware_coldsteel_persistence_service_dll.yml +0 -24
  957. package/bundled-rules/sigma-rules/community/2023/Malware/COLDSTEEL/proc_creation_win_malware_coldsteel_anonymous_process.yml +0 -25
  958. package/bundled-rules/sigma-rules/community/2023/Malware/COLDSTEEL/proc_creation_win_malware_coldsteel_cleanup.yml +0 -31
  959. package/bundled-rules/sigma-rules/community/2023/Malware/COLDSTEEL/proc_creation_win_malware_coldsteel_service_persistence.yml +0 -26
  960. package/bundled-rules/sigma-rules/community/2023/Malware/COLDSTEEL/registry_set_malware_coldsteel_created_users.yml +0 -27
  961. package/bundled-rules/sigma-rules/community/2023/Malware/COLDSTEEL/win_system_malware_coldsteel_persistence_service.yml +0 -28
  962. package/bundled-rules/sigma-rules/community/2023/Malware/DarkGate/README.md +0 -16
  963. package/bundled-rules/sigma-rules/community/2023/Malware/DarkGate/file_event_win_malware_darkgate_autoit3_binary_creation.yml +0 -36
  964. package/bundled-rules/sigma-rules/community/2023/Malware/DarkGate/proc_creation_win_malware_darkgate_autoit3_from_susp_parent_and_location.yml +0 -37
  965. package/bundled-rules/sigma-rules/community/2023/Malware/DarkGate/proc_creation_win_malware_darkgate_net_user_creation.yml +0 -31
  966. package/bundled-rules/sigma-rules/community/2023/Malware/Griffon/proc_creation_win_malware_griffon_patterns.yml +0 -24
  967. package/bundled-rules/sigma-rules/community/2023/Malware/GuLoader/proc_creation_win_malware_guloader_execution.yml +0 -30
  968. package/bundled-rules/sigma-rules/community/2023/Malware/IcedID/proc_creation_win_malware_icedid_rundll32_dllregisterserver.yml +0 -26
  969. package/bundled-rules/sigma-rules/community/2023/Malware/Pikabot/net_connection_win_malware_pikabot_rundll32_activity.yml +0 -37
  970. package/bundled-rules/sigma-rules/community/2023/Malware/Pikabot/proc_creation_win_malware_pikabot_combined_commands_execution.yml +0 -46
  971. package/bundled-rules/sigma-rules/community/2023/Malware/Pikabot/proc_creation_win_malware_pikabot_discovery.yml +0 -38
  972. package/bundled-rules/sigma-rules/community/2023/Malware/Pikabot/proc_creation_win_malware_pikabot_rundll32_hollowing.yml +0 -38
  973. package/bundled-rules/sigma-rules/community/2023/Malware/Pikabot/proc_creation_win_malware_pikabot_rundll32_uncommon_extension.yml +0 -58
  974. package/bundled-rules/sigma-rules/community/2023/Malware/Qakbot/README.md +0 -19
  975. package/bundled-rules/sigma-rules/community/2023/Malware/Qakbot/proc_creation_win_malware_qakbot_regsvr32_calc_pattern.yml +0 -25
  976. package/bundled-rules/sigma-rules/community/2023/Malware/Qakbot/proc_creation_win_malware_qakbot_rundll32_execution.yml +0 -39
  977. package/bundled-rules/sigma-rules/community/2023/Malware/Qakbot/proc_creation_win_malware_qakbot_rundll32_exports.yml +0 -67
  978. package/bundled-rules/sigma-rules/community/2023/Malware/Qakbot/proc_creation_win_malware_qakbot_rundll32_fake_dll_execution.yml +0 -39
  979. package/bundled-rules/sigma-rules/community/2023/Malware/Qakbot/proc_creation_win_malware_qakbot_uninstaller_cleanup.yml +0 -30
  980. package/bundled-rules/sigma-rules/community/2023/Malware/Rhadamanthys/proc_creation_win_malware_rhadamanthys_stealer_dll_launch.yml +0 -31
  981. package/bundled-rules/sigma-rules/community/2023/Malware/Rorschach/proc_creation_win_malware_rorschach_ransomware_activity.yml +0 -32
  982. package/bundled-rules/sigma-rules/community/2023/Malware/SNAKE/README.md +0 -23
  983. package/bundled-rules/sigma-rules/community/2023/Malware/SNAKE/file_event_win_malware_snake_encrypted_payload_ioc.yml +0 -21
  984. package/bundled-rules/sigma-rules/community/2023/Malware/SNAKE/file_event_win_malware_snake_installers_ioc.yml +0 -23
  985. package/bundled-rules/sigma-rules/community/2023/Malware/SNAKE/file_event_win_malware_snake_werfault_creation.yml +0 -28
  986. package/bundled-rules/sigma-rules/community/2023/Malware/SNAKE/proc_creation_win_malware_snake_installer_cli_args.yml +0 -25
  987. package/bundled-rules/sigma-rules/community/2023/Malware/SNAKE/proc_creation_win_malware_snake_installer_exec.yml +0 -33
  988. package/bundled-rules/sigma-rules/community/2023/Malware/SNAKE/proc_creation_win_malware_snake_service_execution.yml +0 -23
  989. package/bundled-rules/sigma-rules/community/2023/Malware/SNAKE/registry_event_malware_snake_covert_store_key.yml +0 -19
  990. package/bundled-rules/sigma-rules/community/2023/Malware/SNAKE/registry_set_malware_snake_encrypted_key.yml +0 -25
  991. package/bundled-rules/sigma-rules/community/2023/Malware/SNAKE/win_system_malware_snake_persistence_service.yml +0 -25
  992. package/bundled-rules/sigma-rules/community/2023/Malware/Ursnif/proc_creation_win_malware_ursnif_cmd_redirection.yml +0 -27
  993. package/bundled-rules/sigma-rules/community/2023/Malware/dns_query_win_malware_socgholish_second_stage_c2.yml +0 -25
  994. package/bundled-rules/sigma-rules/community/2023/TA/3CX-Supply-Chain/README.md +0 -26
  995. package/bundled-rules/sigma-rules/community/2023/TA/3CX-Supply-Chain/dns_query_win_malware_3cx_compromise.yml +0 -59
  996. package/bundled-rules/sigma-rules/community/2023/TA/3CX-Supply-Chain/image_load_malware_3cx_compromise_susp_dll.yml +0 -53
  997. package/bundled-rules/sigma-rules/community/2023/TA/3CX-Supply-Chain/net_connection_win_malware_3cx_compromise_beaconing_activity.yml +0 -59
  998. package/bundled-rules/sigma-rules/community/2023/TA/3CX-Supply-Chain/proc_creation_win_malware_3cx_compromise_execution.yml +0 -72
  999. package/bundled-rules/sigma-rules/community/2023/TA/3CX-Supply-Chain/proc_creation_win_malware_3cx_compromise_susp_children.yml +0 -49
  1000. package/bundled-rules/sigma-rules/community/2023/TA/3CX-Supply-Chain/proc_creation_win_malware_3cx_compromise_susp_update.yml +0 -43
  1001. package/bundled-rules/sigma-rules/community/2023/TA/3CX-Supply-Chain/proxy_malware_3cx_compromise_c2_beacon_activity.yml +0 -57
  1002. package/bundled-rules/sigma-rules/community/2023/TA/3CX-Supply-Chain/proxy_malware_3cx_compromise_susp_ico_requests.yml +0 -38
  1003. package/bundled-rules/sigma-rules/community/2023/TA/Cozy-Bear/image_load_apt_cozy_bear_graphical_proton_dlls.yml +0 -39
  1004. package/bundled-rules/sigma-rules/community/2023/TA/Cozy-Bear/win_security_apt_cozy_bear_scheduled_tasks_name.yml +0 -48
  1005. package/bundled-rules/sigma-rules/community/2023/TA/Cozy-Bear/win_taskscheduler_apt_cozy_bear_graphical_proton_task_names.yml +0 -49
  1006. package/bundled-rules/sigma-rules/community/2023/TA/Diamond-Sleet/README.md +0 -18
  1007. package/bundled-rules/sigma-rules/community/2023/TA/Diamond-Sleet/dns_query_win_apt_diamond_steel_indicators.yml +0 -25
  1008. package/bundled-rules/sigma-rules/community/2023/TA/Diamond-Sleet/file_event_win_apt_diamond_sleet_indicators.yml +0 -28
  1009. package/bundled-rules/sigma-rules/community/2023/TA/Diamond-Sleet/image_load_apt_diamond_sleet_side_load.yml +0 -28
  1010. package/bundled-rules/sigma-rules/community/2023/TA/Diamond-Sleet/proc_creation_win_apt_diamond_sleet_indicators.yml +0 -21
  1011. package/bundled-rules/sigma-rules/community/2023/TA/Diamond-Sleet/registry_event_apt_diamond_sleet_scheduled_task.yml +0 -25
  1012. package/bundled-rules/sigma-rules/community/2023/TA/Diamond-Sleet/win_security_apt_diamond_sleet_scheduled_task.yml +0 -28
  1013. package/bundled-rules/sigma-rules/community/2023/TA/EquationGroup/net_dns_apt_equation_group_triangulation_c2_coms.yml +0 -40
  1014. package/bundled-rules/sigma-rules/community/2023/TA/EquationGroup/proxy_apt_equation_group_triangulation_c2_coms.yml +0 -40
  1015. package/bundled-rules/sigma-rules/community/2023/TA/FIN7/README.md +0 -16
  1016. package/bundled-rules/sigma-rules/community/2023/TA/FIN7/file_event_win_apt_fin7_powershell_scripts_naming_convention.yml +0 -23
  1017. package/bundled-rules/sigma-rules/community/2023/TA/FIN7/posh_ps_apt_fin7_powerhold.yml +0 -28
  1018. package/bundled-rules/sigma-rules/community/2023/TA/FIN7/posh_ps_apt_fin7_powertrash_execution.yml +0 -30
  1019. package/bundled-rules/sigma-rules/community/2023/TA/FIN7/proc_creation_win_apt_fin7_powertrash_lateral_movement.yml +0 -30
  1020. package/bundled-rules/sigma-rules/community/2023/TA/Lace-Tempest/README.md +0 -17
  1021. package/bundled-rules/sigma-rules/community/2023/TA/Lace-Tempest/file_event_win_apt_lace_tempest_indicators.yml +0 -25
  1022. package/bundled-rules/sigma-rules/community/2023/TA/Lace-Tempest/posh_ps_apt_lace_tempest_eraser_script.yml +0 -30
  1023. package/bundled-rules/sigma-rules/community/2023/TA/Lace-Tempest/posh_ps_apt_lace_tempest_malware_launcher.yml +0 -29
  1024. package/bundled-rules/sigma-rules/community/2023/TA/Lace-Tempest/proc_creation_win_apt_lace_tempest_cobalt_strike_download.yml +0 -23
  1025. package/bundled-rules/sigma-rules/community/2023/TA/Lace-Tempest/proc_creation_win_apt_lace_tempest_loader_execution.yml +0 -23
  1026. package/bundled-rules/sigma-rules/community/2023/TA/Lazarus/README.md +0 -16
  1027. package/bundled-rules/sigma-rules/community/2023/TA/Lazarus/image_load_apt_lazarus_side_load_activity.yml +0 -36
  1028. package/bundled-rules/sigma-rules/community/2023/TA/Mint-Sandstorm/README.md +0 -17
  1029. package/bundled-rules/sigma-rules/community/2023/TA/Mint-Sandstorm/proc_creation_win_apt_mint_sandstorm_aspera_faspex_susp_child_process.yml +0 -117
  1030. package/bundled-rules/sigma-rules/community/2023/TA/Mint-Sandstorm/proc_creation_win_apt_mint_sandstorm_log4j_wstomcat_execution.yml +0 -24
  1031. package/bundled-rules/sigma-rules/community/2023/TA/Mint-Sandstorm/proc_creation_win_apt_mint_sandstorm_manage_engine_susp_child_process.yml +0 -123
  1032. package/bundled-rules/sigma-rules/community/2023/TA/Mustang-Panda-Australia-Campaign/README.md +0 -15
  1033. package/bundled-rules/sigma-rules/community/2023/TA/Mustang-Panda-Australia-Campaign/proc_creation_win_apt_mustang_panda_indicators.yml +0 -30
  1034. package/bundled-rules/sigma-rules/community/2023/TA/Okta-Support-System-Breach/README.md +0 -15
  1035. package/bundled-rules/sigma-rules/community/2023/TA/Okta-Support-System-Breach/okta_apt_suspicious_user_creation.yml +0 -27
  1036. package/bundled-rules/sigma-rules/community/2023/TA/Onyx-Sleet/README.md +0 -11
  1037. package/bundled-rules/sigma-rules/community/2023/TA/Onyx-Sleet/file_event_win_apt_onyx_sleet_indicators.yml +0 -21
  1038. package/bundled-rules/sigma-rules/community/2023/TA/PaperCut-Print-Management-Exploitation/README.md +0 -15
  1039. package/bundled-rules/sigma-rules/community/2023/TA/PaperCut-Print-Management-Exploitation/proc_creation_win_papercut_print_management_exploitation_indicators.yml +0 -35
  1040. package/bundled-rules/sigma-rules/community/2023/TA/PaperCut-Print-Management-Exploitation/proc_creation_win_papercut_print_management_exploitation_pc_app.yml +0 -41
  1041. package/bundled-rules/sigma-rules/community/2023/TA/Peach-Sandstorm/proc_creation_win_apt_peach_sandstorm_indicators.yml +0 -22
  1042. package/bundled-rules/sigma-rules/community/2023/TA/Peach-Sandstorm/proxy_apt_peach_sandstorm_falsefont_backdoor_c2_coms.yml +0 -24
  1043. package/bundled-rules/sigma-rules/community/2023/TA/UNC4841-Barracuda-ESG-Zero-Day-Exploitation/README.md +0 -23
  1044. package/bundled-rules/sigma-rules/community/2023/TA/UNC4841-Barracuda-ESG-Zero-Day-Exploitation/file_event_lnx_apt_unc4841_exfil_mail_pattern.yml +0 -23
  1045. package/bundled-rules/sigma-rules/community/2023/TA/UNC4841-Barracuda-ESG-Zero-Day-Exploitation/file_event_lnx_apt_unc4841_file_indicators.yml +0 -65
  1046. package/bundled-rules/sigma-rules/community/2023/TA/UNC4841-Barracuda-ESG-Zero-Day-Exploitation/proc_creation_lnx_apt_unc4841_openssl_connection.yml +0 -30
  1047. package/bundled-rules/sigma-rules/community/2023/TA/UNC4841-Barracuda-ESG-Zero-Day-Exploitation/proc_creation_lnx_apt_unc4841_wget_download_compressed_file_tmep_sh.yml +0 -26
  1048. package/bundled-rules/sigma-rules/community/2023/TA/UNC4841-Barracuda-ESG-Zero-Day-Exploitation/proc_creation_lnx_apt_unc4841_wget_download_tar_files_direct_ip.yml +0 -48
  1049. package/bundled-rules/sigma-rules/community/2023/TA/UNC4841-Barracuda-ESG-Zero-Day-Exploitation/proc_creation_lnx_atp_unc4841_seaspy_execution.yml +0 -24
  1050. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-1212/web_exploit_cve_2024_1212_.yml +0 -33
  1051. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-1708/file_event_win_exploit_cve_2024_1708_screenconnect.yml +0 -33
  1052. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-1708/win_security_exploit_cve_2024_1708_screenconnect.yml +0 -39
  1053. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-1709/file_event_win_exploit_cve_2024_1709_user_database_modification_screenconnect.yml +0 -33
  1054. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-1709/web_exploit_cve_2024_1709_screenconnect.yml +0 -25
  1055. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-1709/win_security_exploit_cve_2024_1709_user_database_modification_screenconnect.yml +0 -38
  1056. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-3094/proc_creation_lnx_exploit_cve_2024_3094_sshd_child_process.yml +0 -28
  1057. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-3400/file_event_paloalto_globalprotect_exploit_cve_2024_3400_command_inject_file_creation.yml +0 -33
  1058. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-3400/paloalto_globalprotect_exploit_cve_2024_3400_command_injection.yml +0 -48
  1059. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-35250/image_load_exploit_cve_2024_35250_privilege_escalation.yml +0 -46
  1060. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-37085/proc_creation_win_exploit_cve_2024_37085_esxi_admins_group_creation.yml +0 -47
  1061. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-37085/win_security_exploit_cve_2024_37085_esxi_admins_group.yml +0 -34
  1062. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-49113/win_application_error_exploit_cve_2024_49113_ldap_nightmare.yml +0 -30
  1063. package/bundled-rules/sigma-rules/community/2024/Exploits/CVE-2024-50623/proc_creation_win_exploit_cve_2024_50623_cleo.yml +0 -36
  1064. package/bundled-rules/sigma-rules/community/2024/Malware/CSharp-Streamer/image_load_malware_csharp_streamer_dotnet_load.yml +0 -24
  1065. package/bundled-rules/sigma-rules/community/2024/Malware/DarkGate/file_event_win_malware_darkgate_autoit3_save_temp.yml +0 -31
  1066. package/bundled-rules/sigma-rules/community/2024/Malware/Generic/file_event_win_malware_generic_creation_configuration_rats.yml +0 -35
  1067. package/bundled-rules/sigma-rules/community/2024/Malware/KamiKakaBot/proc_creation_win_malware_kamikakabot_lnk_lure_execution.yml +0 -29
  1068. package/bundled-rules/sigma-rules/community/2024/Malware/KamiKakaBot/proc_creation_win_malware_kamikakabot_schtasks_persistence.yml +0 -32
  1069. package/bundled-rules/sigma-rules/community/2024/Malware/KamiKakaBot/registry_set_malware_kamikakabot_winlogon_persistence.yml +0 -29
  1070. package/bundled-rules/sigma-rules/community/2024/Malware/Lummac-Stealer/proc_creation_win_malware_lummac_more_vbc.yml +0 -33
  1071. package/bundled-rules/sigma-rules/community/2024/Malware/Raspberry-Robin/image_load_malware_raspberry_robin_side_load_aclui_oleview.yml +0 -38
  1072. package/bundled-rules/sigma-rules/community/2024/Malware/Raspberry-Robin/proc_creation_win_malware_raspberry_robin_rundll32_shell32_cpl_exection.yml +0 -39
  1073. package/bundled-rules/sigma-rules/community/2024/Malware/Raspberry-Robin/registry_set_malware_raspberry_robin_internet_settings_zonemap_tamper.yml +0 -49
  1074. package/bundled-rules/sigma-rules/community/2024/Malware/kapeka/Kapeka.md +0 -17
  1075. package/bundled-rules/sigma-rules/community/2024/Malware/kapeka/file_event_win_malware_kapeka_backdoor_indicators.yml +0 -31
  1076. package/bundled-rules/sigma-rules/community/2024/Malware/kapeka/image_load_malware_kapeka_backdoor_wll.yml +0 -31
  1077. package/bundled-rules/sigma-rules/community/2024/Malware/kapeka/proc_creation_win_malware_kapeka_backdoor_persistence.yml +0 -51
  1078. package/bundled-rules/sigma-rules/community/2024/Malware/kapeka/proc_creation_win_malware_kapeka_backdoor_rundll32_execution.yml +0 -38
  1079. package/bundled-rules/sigma-rules/community/2024/Malware/kapeka/registry_set_malware_kapeka_backdoor_autorun_persistence.yml +0 -34
  1080. package/bundled-rules/sigma-rules/community/2024/Malware/kapeka/registry_set_malware_kapeka_backdoor_configuration.yml +0 -29
  1081. package/bundled-rules/sigma-rules/community/2024/Malware/kapeka/win_security_malware_kapeka_backdoor_scheduled_task_creation.yml +0 -44
  1082. package/bundled-rules/sigma-rules/community/2024/TA/DPRK/dns_query_win_apt_dprk_malicious_domains.yml +0 -23
  1083. package/bundled-rules/sigma-rules/community/2024/TA/FIN7/proc_creation_win_apt_fin7_exploitation_indicators.yml +0 -29
  1084. package/bundled-rules/sigma-rules/community/2024/TA/Forest-Blizzard/README.md +0 -17
  1085. package/bundled-rules/sigma-rules/community/2024/TA/Forest-Blizzard/file_event_win_apt_forest_blizzard_activity.yml +0 -50
  1086. package/bundled-rules/sigma-rules/community/2024/TA/Forest-Blizzard/file_event_win_apt_forest_blizzard_constrained_js.yml +0 -25
  1087. package/bundled-rules/sigma-rules/community/2024/TA/Forest-Blizzard/proc_creation_win_apt_forest_blizzard_activity.yml +0 -49
  1088. package/bundled-rules/sigma-rules/community/2024/TA/Forest-Blizzard/registry_set_apt_forest_blizzard_custom_protocol_handler.yml +0 -26
  1089. package/bundled-rules/sigma-rules/community/2024/TA/Forest-Blizzard/registry_set_apt_forest_blizzard_custom_protocol_handler_dll.yml +0 -26
  1090. package/bundled-rules/sigma-rules/community/2024/TA/SlashAndGrab-Exploitation-In-Wild/file_event_win_apt_unknown_exploitation_indicators.yml +0 -35
  1091. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-10035/proc_creation_win_exploit_cve_2025_10035.yml +0 -78
  1092. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-20333/proxy_exploit_cve_2025_20333.yml +0 -28
  1093. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-24054/file_event_win_exploit_cve_2025_24054_library_ms.yml +0 -31
  1094. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-30406/proc_creation_win_exploit_cve_2025_30406_centrestack_portal_child_process.yml +0 -31
  1095. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-31161/proc_creation_win_crushftp_susp_child_processes.yml +0 -45
  1096. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-31324/file_event_lnx_sap_netweaver_webshell_creation.yml +0 -37
  1097. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-31324/file_event_win_sap_netweaver_webshell_creation.yml +0 -37
  1098. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-31324/proc_creation_lnx_sap_netweaver_susp_child_process.yml +0 -60
  1099. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-31324/proc_creation_win_sap_netweaver_susp_child_process.yml +0 -49
  1100. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-31324/web_lnx_exploit_cve_2025_31324_sap_netviewer_webshell.yml +0 -47
  1101. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-31324/web_lnx_exploit_cve_2025_31324_sap_netviewer_webshell_uploaded.yml +0 -32
  1102. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-32463/file_event_lnx_exploit_cve_2025_32463.yml +0 -29
  1103. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-33053/image_load_win_exploit_cve_2025_33053.yml +0 -45
  1104. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-33053/proc_access_win_exploit_cve_2025_33053.yml +0 -52
  1105. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-33053/proc_creation_win_exploit_cve_2025_33053.yml +0 -58
  1106. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-40551/proc_creation_win_exploit_cve_2025_40551.yml +0 -49
  1107. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-4427/web_invanti_epmm_cve_2025_4427_and_cve_2025_4428.yml +0 -50
  1108. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-49144/proc_creation_win_exploit_cve_2025_49144.yml +0 -35
  1109. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-53770/file_event_win_exploit_cve_2025_53770.yml +0 -37
  1110. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-53770/proc_creation_win_exploit_cve_2025_53770_indicators.yml +0 -39
  1111. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-53770/web_win_iis_exploit_cve_2025_53770.yml +0 -33
  1112. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-54309/proc_creation_win_exploit_cve_2025_54309.yml +0 -54
  1113. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-55182/proc_creation_lnx_exploit_cve_2025_55182_susp_nodejs_server_child_process.yml +0 -129
  1114. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-55182/proc_creation_win_exploit_cve_2025_55182_susp_nodejs_server_child_process.yml +0 -142
  1115. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-57788/proc_creation_win_exploit_cve_2025_57788.yml +0 -32
  1116. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-57790/proc_creation_win_exploit_cve_2025_57790.yml +0 -32
  1117. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-57791/proc_creation_win_exploit_cve_2025_57791.yml +0 -30
  1118. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-59287/proc_creation_win_exploit_cve_2025_59287.yml +0 -38
  1119. package/bundled-rules/sigma-rules/community/2025/Exploits/CVE-2025-59287/win_wsus_exploit_cve_2025_59287.yml +0 -37
  1120. package/bundled-rules/sigma-rules/community/2025/Malware/Atomic-MacOS-Stealer/file_event_macos_malware_amos_persistence.yml +0 -32
  1121. package/bundled-rules/sigma-rules/community/2025/Malware/Atomic-MacOS-Stealer/proc_creation_macos_malware_amos_curl_post.yml +0 -40
  1122. package/bundled-rules/sigma-rules/community/2025/Malware/Grixba/proc_creation_win_malware_grixba_recon.yml +0 -50
  1123. package/bundled-rules/sigma-rules/community/2025/Malware/Katz-Stealer/dns_query_win_katz_stealer_domain.yml +0 -32
  1124. package/bundled-rules/sigma-rules/community/2025/Malware/Katz-Stealer/image_load_win_katz_stealer_payloads.yml +0 -27
  1125. package/bundled-rules/sigma-rules/community/2025/Malware/Katz-Stealer/net_dns_katz_stealer_domain.yml +0 -31
  1126. package/bundled-rules/sigma-rules/community/2025/Malware/Katz-Stealer/zeek_http_katz_stealer_susp_useragent.yml +0 -23
  1127. package/bundled-rules/sigma-rules/community/2025/Malware/Shai-Hulud/file_event_lnx_mal_shai_hulud_workflow.yml +0 -25
  1128. package/bundled-rules/sigma-rules/community/2025/Malware/Shai-Hulud/github_mal_shai_hulud_npm_attack.yml +0 -24
  1129. package/bundled-rules/sigma-rules/community/2025/Malware/Shai-Hulud/proc_creation_lnx_mal_shai_hululd_exfiltration.yml +0 -28
  1130. package/bundled-rules/sigma-rules/community/2025/Malware/file_event_win_malware_funklocker_ransomware_extension.yml +0 -23
  1131. package/bundled-rules/sigma-rules/community/2025/Malware/proc_creation_win_malware_kalambur_curl_socks_tor.yml +0 -34
  1132. package/bundled-rules/sigma-rules/community/README.md +0 -1
  1133. package/bundled-rules/sigma-rules/community/VERSION +0 -5
  1134. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_full_data_export_triggered.yml +0 -24
  1135. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_global_permissions_change_detected.yml +0 -29
  1136. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_global_secret_scanning_rule_deleted.yml +0 -24
  1137. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_global_ssh_settings_change_detected.yml +0 -26
  1138. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_log_configuration_update_detected.yml +0 -23
  1139. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_project_secret_scanning_allowlist_added.yml +0 -24
  1140. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_secret_scanning_exempt_repository_detected.yml +0 -24
  1141. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_secret_scanning_rule_deleted.yml +0 -28
  1142. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_unauthorized_access_detected.yml +0 -23
  1143. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_unauthorized_full_data_export_triggered.yml +0 -26
  1144. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_user_details_export_attempt_detected.yml +0 -31
  1145. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_user_login_failure_detected.yml +0 -30
  1146. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_user_login_failure_via_ssh_detected.yml +0 -28
  1147. package/bundled-rules/sigma-rules/community/application/bitbucket/audit/bitbucket_audit_user_permissions_export_attempt_detected.yml +0 -31
  1148. package/bundled-rules/sigma-rules/community/application/django/appframework_django_exceptions.yml +0 -36
  1149. package/bundled-rules/sigma-rules/community/application/github/audit/github_delete_action_invoked.yml +0 -27
  1150. package/bundled-rules/sigma-rules/community/application/github/audit/github_disable_high_risk_configuration.yml +0 -38
  1151. package/bundled-rules/sigma-rules/community/application/github/audit/github_disabled_outdated_dependency_or_vulnerability.yml +0 -30
  1152. package/bundled-rules/sigma-rules/community/application/github/audit/github_fork_private_repos_enabled_or_cleared.yml +0 -27
  1153. package/bundled-rules/sigma-rules/community/application/github/audit/github_new_org_member.yml +0 -24
  1154. package/bundled-rules/sigma-rules/community/application/github/audit/github_new_secret_created.yml +0 -29
  1155. package/bundled-rules/sigma-rules/community/application/github/audit/github_outside_collaborator_detected.yml +0 -31
  1156. package/bundled-rules/sigma-rules/community/application/github/audit/github_pages_site_changed_to_public.yml +0 -25
  1157. package/bundled-rules/sigma-rules/community/application/github/audit/github_push_protection_bypass_detected.yml +0 -23
  1158. package/bundled-rules/sigma-rules/community/application/github/audit/github_push_protection_disabled.yml +0 -30
  1159. package/bundled-rules/sigma-rules/community/application/github/audit/github_repo_or_org_transferred.yml +0 -31
  1160. package/bundled-rules/sigma-rules/community/application/github/audit/github_repository_archive_status_changed.yml +0 -27
  1161. package/bundled-rules/sigma-rules/community/application/github/audit/github_secret_scanning_feature_disabled.yml +0 -28
  1162. package/bundled-rules/sigma-rules/community/application/github/audit/github_self_hosted_runner_changes_detected.yml +0 -45
  1163. package/bundled-rules/sigma-rules/community/application/github/audit/github_ssh_certificate_config_changed.yml +0 -28
  1164. package/bundled-rules/sigma-rules/community/application/jvm/java_jndi_injection_exploitation_attempt.yml +0 -24
  1165. package/bundled-rules/sigma-rules/community/application/jvm/java_local_file_read.yml +0 -26
  1166. package/bundled-rules/sigma-rules/community/application/jvm/java_ognl_injection_exploitation_attempt.yml +0 -28
  1167. package/bundled-rules/sigma-rules/community/application/jvm/java_rce_exploitation_attempt.yml +0 -24
  1168. package/bundled-rules/sigma-rules/community/application/jvm/java_xxe_exploitation_attempt.yml +0 -25
  1169. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_change_admission_controller.yml +0 -42
  1170. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_cronjob_modification.yml +0 -39
  1171. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_deployment_deleted.yml +0 -25
  1172. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_events_deleted.yml +0 -28
  1173. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_exec_into_container.yml +0 -25
  1174. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_hostpath_mount.yml +0 -28
  1175. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_pod_in_system_namespace.yml +0 -28
  1176. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_privileged_pod_creation.yml +0 -30
  1177. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_rbac_permisions_listing.yml +0 -29
  1178. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_rolebinding_modification.yml +0 -35
  1179. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_secrets_enumeration.yml +0 -26
  1180. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_secrets_modified_or_deleted.yml +0 -32
  1181. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_serviceaccount_creation.yml +0 -27
  1182. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_sidecar_injection.yml +0 -29
  1183. package/bundled-rules/sigma-rules/community/application/kubernetes/audit/kubernetes_audit_unauthorized_unauthenticated_actions.yml +0 -25
  1184. package/bundled-rules/sigma-rules/community/application/nodejs/nodejs_rce_exploitation_attempt.yml +0 -22
  1185. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_ftp_login_attempt.yml +0 -25
  1186. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_git_clone_request.yml +0 -22
  1187. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_http_get.yml +0 -22
  1188. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_http_post_login_attempt.yml +0 -23
  1189. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_httpproxy_login_attempt.yml +0 -25
  1190. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_mssql_login_sqlauth.yml +0 -25
  1191. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_mssql_login_winauth.yml +0 -25
  1192. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_mysql_login_attempt.yml +0 -24
  1193. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_ntp_monlist.yml +0 -22
  1194. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_portscan_nmap_fin_scan.yaml +0 -22
  1195. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_portscan_nmap_null_scan.yaml +0 -22
  1196. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_portscan_nmap_os_scan.yaml +0 -22
  1197. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_portscan_nmap_xmas_scan.yaml +0 -22
  1198. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_portscan_syn_scan.yaml +0 -22
  1199. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_rdp_connection_attempt.yaml +0 -24
  1200. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_redis_command.yml +0 -24
  1201. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_sip_request.yml +0 -22
  1202. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_smb_file_open.yml +0 -24
  1203. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_snmp_cmd.yml +0 -24
  1204. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_ssh_login_attempt.yml +0 -28
  1205. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_ssh_new_connection.yml +0 -28
  1206. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_telnet_login_attempt.yml +0 -27
  1207. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_tftp_request.yml +0 -22
  1208. package/bundled-rules/sigma-rules/community/application/opencanary/opencanary_vnc_connection_attempt.yml +0 -22
  1209. package/bundled-rules/sigma-rules/community/application/python/app_python_sql_exceptions.yml +0 -25
  1210. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_atsvc_lateral_movement.yml +0 -34
  1211. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_atsvc_recon.yml +0 -30
  1212. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_dcsync_attack.yml +0 -32
  1213. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_efs_abuse.yml +0 -28
  1214. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_eventlog_recon.yml +0 -26
  1215. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_itaskschedulerservice_lateral_movement.yml +0 -41
  1216. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_itaskschedulerservice_recon.yml +0 -37
  1217. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_printing_lateral_movement.yml +0 -32
  1218. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_remote_dcom_or_wmi.yml +0 -34
  1219. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_remote_registry_lateral_movement.yml +0 -40
  1220. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_remote_registry_recon.yml +0 -38
  1221. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_remote_server_service_abuse.yml +0 -26
  1222. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_remote_service_lateral_movement.yml +0 -28
  1223. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_sasec_lateral_movement.yml +0 -34
  1224. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_sasec_recon.yml +0 -30
  1225. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_sharphound_recon_account.yml +0 -28
  1226. package/bundled-rules/sigma-rules/community/application/rpc_firewall/rpc_firewall_sharphound_recon_sessions.yml +0 -28
  1227. package/bundled-rules/sigma-rules/community/application/ruby/appframework_ruby_on_rails_exceptions.yml +0 -29
  1228. package/bundled-rules/sigma-rules/community/application/spring/spring_application_exceptions.yml +0 -28
  1229. package/bundled-rules/sigma-rules/community/application/spring/spring_spel_injection.yml +0 -23
  1230. package/bundled-rules/sigma-rules/community/application/sql/app_sqlinjection_errors.yml +0 -31
  1231. package/bundled-rules/sigma-rules/community/application/velocity/velocity_ssti_injection.yml +0 -26
  1232. package/bundled-rules/sigma-rules/community/category/antivirus/av_exploiting.yml +0 -49
  1233. package/bundled-rules/sigma-rules/community/category/antivirus/av_hacktool.yml +0 -70
  1234. package/bundled-rules/sigma-rules/community/category/antivirus/av_password_dumper.yml +0 -60
  1235. package/bundled-rules/sigma-rules/community/category/antivirus/av_ransomware.yml +0 -58
  1236. package/bundled-rules/sigma-rules/community/category/antivirus/av_relevant_files.yml +0 -79
  1237. package/bundled-rules/sigma-rules/community/category/antivirus/av_webshell.yml +0 -86
  1238. package/bundled-rules/sigma-rules/community/category/database/db_anomalous_query.yml +0 -30
  1239. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_bucket_deleted.yml +0 -27
  1240. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_console_login_failed_authentication.yml +0 -25
  1241. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_console_login_success_from_susp_locations.yml +0 -32
  1242. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_console_login_success_without_mfa.yml +0 -30
  1243. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_disable_logging.yml +0 -26
  1244. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_guardduty_detector_deleted_or_updated.yml +0 -47
  1245. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_imds_malicious_usage.yml +0 -33
  1246. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_new_acl_entries.yml +0 -23
  1247. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_new_route_added.yml +0 -24
  1248. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_pua_trufflehog.yml +0 -25
  1249. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_region_enabled.yml +0 -26
  1250. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_security_group_change_ingress_egress.yml +0 -30
  1251. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_security_group_change_loadbalancer.yml +0 -27
  1252. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_security_group_change_rds.yml +0 -28
  1253. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_ssm_malicious_usage.yml +0 -31
  1254. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_cloudtrail_vpc_flow_logs_deleted.yml +0 -28
  1255. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_config_disable_recording.yml +0 -25
  1256. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_console_getsignintoken.yml +0 -29
  1257. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_delete_identity.yml +0 -23
  1258. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_delete_saml_provider.yml +0 -32
  1259. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_disable_bucket_versioning.yml +0 -23
  1260. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_ec2_disable_encryption.yml +0 -27
  1261. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_ec2_import_key_pair_activity.yml +0 -28
  1262. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_ec2_startup_script_change.yml +0 -26
  1263. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_ec2_vm_export_failure.yml +0 -29
  1264. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_ecs_task_definition_cred_endpoint_query.yml +0 -31
  1265. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_efs_fileshare_modified_or_deleted.yml +0 -25
  1266. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_efs_fileshare_mount_modified_or_deleted.yml +0 -23
  1267. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_eks_cluster_created_or_deleted.yml +0 -27
  1268. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_elasticache_security_group_created.yml +0 -26
  1269. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_elasticache_security_group_modified_or_deleted.yml +0 -30
  1270. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_enum_buckets.yml +0 -31
  1271. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_guardduty_disruption.yml +0 -23
  1272. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_iam_backdoor_users_keys.yml +0 -30
  1273. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_iam_s3browser_loginprofile_creation.yml +0 -30
  1274. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_iam_s3browser_templated_s3_bucket_policy_creation.yml +0 -32
  1275. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_iam_s3browser_user_or_accesskey_creation.yml +0 -30
  1276. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_kms_import_key_material.yml +0 -30
  1277. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_lambda_function_url.yml +0 -27
  1278. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_new_lambda_layer_attached.yml +0 -28
  1279. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_passed_role_to_glue_development_endpoint.yml +0 -27
  1280. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_rds_change_master_password.yml +0 -24
  1281. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_rds_dbcluster_actions.yml +0 -27
  1282. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_rds_public_db_restore.yml +0 -24
  1283. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_root_account_usage.yml +0 -27
  1284. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_route_53_domain_transferred_lock_disabled.yml +0 -27
  1285. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_route_53_domain_transferred_to_another_account.yml +0 -25
  1286. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_s3_data_management_tampering.yml +0 -36
  1287. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_securityhub_finding_evasion.yml +0 -27
  1288. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_snapshot_backup_exfiltration.yml +0 -23
  1289. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_sso_idp_change.yml +0 -34
  1290. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_sts_assumerole_misuse.yml +0 -30
  1291. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_sts_getcalleridentity_trufflehog.yml +0 -28
  1292. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_sts_getsessiontoken_misuse.yml +0 -29
  1293. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_susp_saml_activity.yml +0 -36
  1294. package/bundled-rules/sigma-rules/community/cloud/aws/cloudtrail/aws_update_login_profile.yml +0 -28
  1295. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_aadhybridhealth_adfs_new_server.yml +0 -28
  1296. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_aadhybridhealth_adfs_service_delete.yml +0 -28
  1297. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_ad_user_added_to_admin_role.yml +0 -30
  1298. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_application_deleted.yml +0 -27
  1299. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_application_gateway_modified_or_deleted.yml +0 -25
  1300. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_application_security_group_modified_or_deleted.yml +0 -25
  1301. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_container_registry_created_or_deleted.yml +0 -30
  1302. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_creating_number_of_resources_detection.yml +0 -24
  1303. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_device_no_longer_managed_or_compliant.yml +0 -23
  1304. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_device_or_configuration_modified_or_deleted.yml +0 -29
  1305. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_dns_zone_modified_or_deleted.yml +0 -26
  1306. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_firewall_modified_or_deleted.yml +0 -26
  1307. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_firewall_rule_collection_modified_or_deleted.yml +0 -30
  1308. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_granting_permission_detection.yml +0 -23
  1309. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_keyvault_key_modified_or_deleted.yml +0 -35
  1310. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_keyvault_modified_or_deleted.yml +0 -30
  1311. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_keyvault_secrets_modified_or_deleted.yml +0 -34
  1312. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_kubernetes_admission_controller.yml +0 -41
  1313. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_kubernetes_cluster_created_or_deleted.yml +0 -30
  1314. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_kubernetes_cronjob.yml +0 -36
  1315. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_kubernetes_events_deleted.yml +0 -24
  1316. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_kubernetes_network_policy_change.yml +0 -33
  1317. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_kubernetes_pods_deleted.yml +0 -23
  1318. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_kubernetes_role_access.yml +0 -36
  1319. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_kubernetes_rolebinding_modified_or_deleted.yml +0 -33
  1320. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_kubernetes_secret_or_config_object_access.yml +0 -31
  1321. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_kubernetes_service_account_modified_or_deleted.yml +0 -32
  1322. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_mfa_disabled.yml +0 -25
  1323. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_network_firewall_policy_modified_or_deleted.yml +0 -28
  1324. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_network_firewall_rule_modified_or_deleted.yml +0 -26
  1325. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_network_p2s_vpn_modified_or_deleted.yml +0 -28
  1326. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_network_security_modified_or_deleted.yml +0 -28
  1327. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_network_virtual_device_modified_or_deleted.yml +0 -35
  1328. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_new_cloudshell_created.yml +0 -22
  1329. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_owner_removed_from_application_or_service_principal.yml +0 -25
  1330. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_rare_operations.yml +0 -28
  1331. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_service_principal_created.yml +0 -23
  1332. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_service_principal_removed.yml +0 -23
  1333. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_subscription_permissions_elevation_via_activitylogs.yml +0 -28
  1334. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_suppression_rule_created.yml +0 -23
  1335. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_virtual_network_modified_or_deleted.yml +0 -27
  1336. package/bundled-rules/sigma-rules/community/cloud/azure/activity_logs/azure_vpn_connection_modified_or_deleted.yml +0 -24
  1337. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_aad_secops_ca_policy_removedby_bad_actor.yml +0 -26
  1338. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_aad_secops_ca_policy_updatedby_bad_actor.yml +0 -27
  1339. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_aad_secops_new_ca_policy_addedby_bad_actor.yml +0 -23
  1340. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_ad_account_created_deleted.yml +0 -28
  1341. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_ad_account_created_deleted_nonapproved_user.yml +0 -30
  1342. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_ad_bitlocker_key_retrieval.yml +0 -25
  1343. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_ad_certificate_based_authencation_enabled.yml +0 -26
  1344. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_ad_device_registration_policy_changes.yml +0 -23
  1345. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_ad_guest_users_invited_to_tenant_by_non_approved_inviters.yml +0 -27
  1346. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_ad_new_root_ca_added.yml +0 -26
  1347. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_ad_users_added_to_device_admin_roles.yml +0 -30
  1348. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_app_appid_uri_changes.yml +0 -28
  1349. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_app_credential_added.yml +0 -25
  1350. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_app_delegated_permissions_all_users.yml +0 -21
  1351. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_app_end_user_consent.yml +0 -21
  1352. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_app_end_user_consent_blocked.yml +0 -21
  1353. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_app_owner_added.yml +0 -21
  1354. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_app_permissions_msft.yml +0 -23
  1355. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_app_privileged_permissions.yml +0 -26
  1356. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_app_role_added.yml +0 -27
  1357. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_app_uri_modifications.yml +0 -28
  1358. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_auditlogs_laps_credential_dumping.yml +0 -26
  1359. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_change_to_authentication_method.yml +0 -28
  1360. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_federation_modified.yml +0 -28
  1361. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_group_user_addition_ca_modification.yml +0 -25
  1362. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_group_user_removal_ca_modification.yml +0 -25
  1363. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_guest_invite_failure.yml +0 -25
  1364. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_guest_to_member.yml +0 -26
  1365. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_pim_activation_approve_deny.yml +0 -24
  1366. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_pim_alerts_disabled.yml +0 -24
  1367. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_pim_change_settings.yml +0 -24
  1368. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_priviledged_role_assignment_add.yml +0 -26
  1369. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_priviledged_role_assignment_bulk_change.yml +0 -24
  1370. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_privileged_account_creation.yml +0 -28
  1371. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_subscription_permissions_elevation_via_auditlogs.yml +0 -29
  1372. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_tap_added.yml +0 -25
  1373. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_update_risk_and_mfa_registration_policy.yml +0 -25
  1374. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_user_account_mfa_disable.yml +0 -28
  1375. package/bundled-rules/sigma-rules/community/cloud/azure/audit_logs/azure_user_password_change.yml +0 -30
  1376. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_anomalous_token.yml +0 -22
  1377. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_anomalous_user.yml +0 -23
  1378. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_anonymous_ip_activity.yml +0 -25
  1379. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_anonymous_ip_address.yml +0 -22
  1380. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_atypical_travel.yml +0 -25
  1381. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_impossible_travel.yml +0 -25
  1382. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_inbox_forwarding_rule.yml +0 -22
  1383. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_inbox_manipulation.yml +0 -22
  1384. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_leaked_credentials.yml +0 -22
  1385. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_malicious_ip_address.yml +0 -22
  1386. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_malicious_ip_address_suspicious.yml +0 -22
  1387. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_malware_linked_ip.yml +0 -22
  1388. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_new_coutry_region.yml +0 -25
  1389. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_password_spray.yml +0 -22
  1390. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_prt_access.yml +0 -22
  1391. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_suspicious_browser.yml +0 -25
  1392. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_threat_intel.yml +0 -26
  1393. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_token_issuer_anomaly.yml +0 -22
  1394. package/bundled-rules/sigma-rules/community/cloud/azure/identity_protection/azure_identity_protection_unfamilar_sign_in.yml +0 -25
  1395. package/bundled-rules/sigma-rules/community/cloud/azure/privileged_identity_management/azure_pim_account_stale.yml +0 -24
  1396. package/bundled-rules/sigma-rules/community/cloud/azure/privileged_identity_management/azure_pim_invalid_license.yml +0 -24
  1397. package/bundled-rules/sigma-rules/community/cloud/azure/privileged_identity_management/azure_pim_role_assigned_outside_of_pim.yml +0 -24
  1398. package/bundled-rules/sigma-rules/community/cloud/azure/privileged_identity_management/azure_pim_role_frequent_activation.yml +0 -24
  1399. package/bundled-rules/sigma-rules/community/cloud/azure/privileged_identity_management/azure_pim_role_no_mfa_required.yml +0 -24
  1400. package/bundled-rules/sigma-rules/community/cloud/azure/privileged_identity_management/azure_pim_role_not_used.yml +0 -24
  1401. package/bundled-rules/sigma-rules/community/cloud/azure/privileged_identity_management/azure_pim_too_many_global_admins.yml +0 -24
  1402. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_account_lockout.yml +0 -22
  1403. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_account_signin_outside_hours.yml +0 -29
  1404. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_auth_failure_increase.yml +0 -25
  1405. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_auth_sucess_increase.yml +0 -26
  1406. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_auth_to_important_apps_using_single_factor_auth.yml +0 -26
  1407. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_authentications_from_countries_you_do_not_operate_out_of.yml +0 -28
  1408. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_azurehound_discovery.yml +0 -23
  1409. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_device_registration_or_join_without_mfa.yml +0 -27
  1410. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_failed_auth_from_countries_you_do_not_operate_out_of.yml +0 -28
  1411. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_only_single_factor_auth_required.yml +0 -27
  1412. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_risky_sign_ins_with_singlefactorauth_from_unknown_devices.yml +0 -31
  1413. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_sign_ins_from_noncompliant_devices.yml +0 -24
  1414. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_sign_ins_from_unknown_devices.yml +0 -28
  1415. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_ad_suspicious_signin_bypassing_mfa.yml +0 -31
  1416. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_app_device_code_authentication.yml +0 -27
  1417. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_app_ropc_authentication.yml +0 -26
  1418. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_blocked_account_attempt.yml +0 -26
  1419. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_conditional_access_failure.yml +0 -29
  1420. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_legacy_authentication_protocols.yml +0 -35
  1421. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_login_to_disabled_account.yml +0 -26
  1422. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_mfa_denies.yml +0 -28
  1423. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_mfa_interrupted.yml +0 -32
  1424. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_privileged_account_no_saw_paw.yml +0 -35
  1425. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_privileged_account_sigin_expected_controls.yml +0 -31
  1426. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_privileged_account_signin_outside_hours.yml +0 -31
  1427. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_unusual_authentication_interruption.yml +0 -32
  1428. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_user_login_blocked_by_conditional_access.yml +0 -29
  1429. package/bundled-rules/sigma-rules/community/cloud/azure/signin_logs/azure_users_authenticating_to_other_azure_ad_tenants.yml +0 -27
  1430. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_access_policy_deleted.yml +0 -32
  1431. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_breakglass_container_workload_deployed.yml +0 -29
  1432. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_bucket_enumeration.yml +0 -24
  1433. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_bucket_modified_or_deleted.yml +0 -26
  1434. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_dlp_re_identifies_sensitive_information.yml +0 -22
  1435. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_dns_zone_modified_or_deleted.yml +0 -24
  1436. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_firewall_rule_modified_or_deleted.yml +0 -28
  1437. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_full_network_traffic_packet_capture.yml +0 -30
  1438. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_kubernetes_admission_controller.yml +0 -42
  1439. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_kubernetes_cronjob.yml +0 -31
  1440. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_kubernetes_rolebinding.yml +0 -34
  1441. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_kubernetes_secrets_modified_or_deleted.yml +0 -26
  1442. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_service_account_disabled_or_deleted.yml +0 -25
  1443. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_service_account_modified.yml +0 -27
  1444. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_sql_database_modified_or_deleted.yml +0 -27
  1445. package/bundled-rules/sigma-rules/community/cloud/gcp/audit/gcp_vpn_tunnel_modified_or_deleted.yml +0 -25
  1446. package/bundled-rules/sigma-rules/community/cloud/gcp/gworkspace/gcp_gworkspace_application_access_levels_modified.yml +0 -28
  1447. package/bundled-rules/sigma-rules/community/cloud/gcp/gworkspace/gcp_gworkspace_application_removed.yml +0 -26
  1448. package/bundled-rules/sigma-rules/community/cloud/gcp/gworkspace/gcp_gworkspace_granted_domain_api_access.yml +0 -26
  1449. package/bundled-rules/sigma-rules/community/cloud/gcp/gworkspace/gcp_gworkspace_mfa_disabled.yml +0 -28
  1450. package/bundled-rules/sigma-rules/community/cloud/gcp/gworkspace/gcp_gworkspace_role_modified_or_deleted.yml +0 -27
  1451. package/bundled-rules/sigma-rules/community/cloud/gcp/gworkspace/gcp_gworkspace_role_privilege_deleted.yml +0 -24
  1452. package/bundled-rules/sigma-rules/community/cloud/gcp/gworkspace/gcp_gworkspace_user_granted_admin_privileges.yml +0 -27
  1453. package/bundled-rules/sigma-rules/community/cloud/m365/audit/microsoft365_bypass_conditional_access.yml +0 -31
  1454. package/bundled-rules/sigma-rules/community/cloud/m365/audit/microsoft365_disabling_mfa.yml +0 -23
  1455. package/bundled-rules/sigma-rules/community/cloud/m365/audit/microsoft365_new_federated_domain_added_audit.yml +0 -30
  1456. package/bundled-rules/sigma-rules/community/cloud/m365/audit/microsoft365_susp_email_forwarding_activity.yml +0 -49
  1457. package/bundled-rules/sigma-rules/community/cloud/m365/audit/microsoft365_susp_inbox_rule_creation_or_update_activity.yml +0 -38
  1458. package/bundled-rules/sigma-rules/community/cloud/m365/exchange/microsoft365_new_federated_domain_added_exchange.yml +0 -30
  1459. package/bundled-rules/sigma-rules/community/cloud/m365/threat_detection/microsoft365_from_susp_ip_addresses.yml +0 -27
  1460. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_activity_by_terminated_user.yml +0 -26
  1461. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_activity_from_anonymous_ip_addresses.yml +0 -25
  1462. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_activity_from_infrequent_country.yml +0 -25
  1463. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_data_exfiltration_to_unsanctioned_app.yml +0 -25
  1464. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_impossible_travel_activity.yml +0 -28
  1465. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_logon_from_risky_ip_address.yml +0 -28
  1466. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_potential_ransomware_activity.yml +0 -25
  1467. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_pst_export_alert.yml +0 -28
  1468. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_pst_export_alert_using_new_compliancesearchaction.yml +0 -28
  1469. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_susp_inbox_forwarding.yml +0 -25
  1470. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_susp_oauth_app_file_download_activities.yml +0 -24
  1471. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_unusual_volume_of_file_deletion.yml +0 -25
  1472. package/bundled-rules/sigma-rules/community/cloud/m365/threat_management/microsoft365_user_restricted_from_sending_email.yml +0 -25
  1473. package/bundled-rules/sigma-rules/community/cloud/okta/okta_password_health_report_query.yml +0 -25
  1474. package/bundled-rules/sigma-rules/community/identity/cisco_duo/cisco_duo_mfa_bypass_via_bypass_code.yml +0 -26
  1475. package/bundled-rules/sigma-rules/community/identity/okta/okta_admin_activity_from_proxy_query.yml +0 -23
  1476. package/bundled-rules/sigma-rules/community/identity/okta/okta_admin_role_assigned_to_user_or_group.yml +0 -27
  1477. package/bundled-rules/sigma-rules/community/identity/okta/okta_admin_role_assignment_created.yml +0 -21
  1478. package/bundled-rules/sigma-rules/community/identity/okta/okta_api_token_created.yml +0 -22
  1479. package/bundled-rules/sigma-rules/community/identity/okta/okta_api_token_revoked.yml +0 -23
  1480. package/bundled-rules/sigma-rules/community/identity/okta/okta_application_modified_or_deleted.yml +0 -25
  1481. package/bundled-rules/sigma-rules/community/identity/okta/okta_application_sign_on_policy_modified_or_deleted.yml +0 -24
  1482. package/bundled-rules/sigma-rules/community/identity/okta/okta_fastpass_phishing_detection.yml +0 -25
  1483. package/bundled-rules/sigma-rules/community/identity/okta/okta_identity_provider_created.yml +0 -23
  1484. package/bundled-rules/sigma-rules/community/identity/okta/okta_mfa_reset_or_deactivated.yml +0 -27
  1485. package/bundled-rules/sigma-rules/community/identity/okta/okta_network_zone_deactivated_or_deleted.yml +0 -25
  1486. package/bundled-rules/sigma-rules/community/identity/okta/okta_new_behaviours_admin_console.yml +0 -30
  1487. package/bundled-rules/sigma-rules/community/identity/okta/okta_password_in_alternateid_field.yml +0 -34
  1488. package/bundled-rules/sigma-rules/community/identity/okta/okta_policy_modified_or_deleted.yml +0 -26
  1489. package/bundled-rules/sigma-rules/community/identity/okta/okta_policy_rule_modified_or_deleted.yml +0 -25
  1490. package/bundled-rules/sigma-rules/community/identity/okta/okta_security_threat_detected.yml +0 -23
  1491. package/bundled-rules/sigma-rules/community/identity/okta/okta_suspicious_activity_enduser_report.yml +0 -22
  1492. package/bundled-rules/sigma-rules/community/identity/okta/okta_unauthorized_access_to_app.yml +0 -22
  1493. package/bundled-rules/sigma-rules/community/identity/okta/okta_user_account_locked_out.yml +0 -23
  1494. package/bundled-rules/sigma-rules/community/identity/okta/okta_user_created.yml +0 -20
  1495. package/bundled-rules/sigma-rules/community/identity/okta/okta_user_session_start_via_anonymised_proxy.yml +0 -23
  1496. package/bundled-rules/sigma-rules/community/identity/onelogin/onelogin_assumed_another_user.yml +0 -21
  1497. package/bundled-rules/sigma-rules/community/identity/onelogin/onelogin_user_account_locked.yml +0 -25
  1498. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_binary_padding.yml +0 -39
  1499. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_bpfdoor_port_redirect.yml +0 -30
  1500. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_capabilities_discovery.yml +0 -31
  1501. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_change_file_time_attr.yml +0 -42
  1502. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_chattr_immutable_removal.yml +0 -29
  1503. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_clipboard_collection.yml +0 -34
  1504. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_clipboard_image_collection.yml +0 -35
  1505. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_coinminer.yml +0 -34
  1506. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_data_compressed.yml +0 -32
  1507. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_data_exfil_wget.yml +0 -27
  1508. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_dd_delete_file.yml +0 -26
  1509. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_file_or_folder_permissions.yml +0 -25
  1510. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_find_cred_in_files.yml +0 -26
  1511. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_hidden_files_directories.yml +0 -31
  1512. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_hidden_zip_files_steganography.yml +0 -29
  1513. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_masquerading_crond.yml +0 -25
  1514. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_modify_system_firewall.yml +0 -45
  1515. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_network_sniffing.yml +0 -33
  1516. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_screencapture_import.yml +0 -40
  1517. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_screencaputre_xwd.yml +0 -31
  1518. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_steghide_embed_steganography.yml +0 -30
  1519. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_steghide_extract_steganography.yml +0 -28
  1520. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_susp_cmds.yml +0 -36
  1521. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_susp_histfile_operations.yml +0 -30
  1522. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_susp_service_reload_or_restart.yml +0 -31
  1523. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_system_shutdown_reboot.yml +0 -33
  1524. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_unzip_hidden_zip_files_steganography.yml +0 -27
  1525. package/bundled-rules/sigma-rules/community/linux/auditd/execve/lnx_auditd_user_discovery.yml +0 -33
  1526. package/bundled-rules/sigma-rules/community/linux/auditd/lnx_auditd_audio_capture.yml +0 -32
  1527. package/bundled-rules/sigma-rules/community/linux/auditd/lnx_auditd_disable_aslr_protection.yml +0 -40
  1528. package/bundled-rules/sigma-rules/community/linux/auditd/lnx_auditd_keylogging_with_pam_d.yml +0 -34
  1529. package/bundled-rules/sigma-rules/community/linux/auditd/lnx_auditd_password_policy_discovery.yml +0 -45
  1530. package/bundled-rules/sigma-rules/community/linux/auditd/lnx_auditd_susp_c2_commands.yml +0 -49
  1531. package/bundled-rules/sigma-rules/community/linux/auditd/lnx_auditd_system_info_discovery.yml +0 -47
  1532. package/bundled-rules/sigma-rules/community/linux/auditd/path/lnx_auditd_auditing_config_change.yml +0 -27
  1533. package/bundled-rules/sigma-rules/community/linux/auditd/path/lnx_auditd_bpfdoor_file_accessed.yml +0 -27
  1534. package/bundled-rules/sigma-rules/community/linux/auditd/path/lnx_auditd_hidden_binary_execution.yml +0 -33
  1535. package/bundled-rules/sigma-rules/community/linux/auditd/path/lnx_auditd_ld_so_preload_mod.yml +0 -26
  1536. package/bundled-rules/sigma-rules/community/linux/auditd/path/lnx_auditd_logging_config_change.yml +0 -26
  1537. package/bundled-rules/sigma-rules/community/linux/auditd/path/lnx_auditd_magic_system_request_key.yml +0 -41
  1538. package/bundled-rules/sigma-rules/community/linux/auditd/path/lnx_auditd_system_info_discovery2.yml +0 -35
  1539. package/bundled-rules/sigma-rules/community/linux/auditd/path/lnx_auditd_systemd_service_creation.yml +0 -30
  1540. package/bundled-rules/sigma-rules/community/linux/auditd/path/lnx_auditd_unix_shell_configuration_modification.yml +0 -54
  1541. package/bundled-rules/sigma-rules/community/linux/auditd/service_stop/lnx_auditd_disable_system_firewall.yml +0 -26
  1542. package/bundled-rules/sigma-rules/community/linux/auditd/syscall/lnx_auditd_clean_disable_dmesg_logs_via_syslog.yml +0 -41
  1543. package/bundled-rules/sigma-rules/community/linux/auditd/syscall/lnx_auditd_create_account.yml +0 -27
  1544. package/bundled-rules/sigma-rules/community/linux/auditd/syscall/lnx_auditd_load_module_insmod.yml +0 -30
  1545. package/bundled-rules/sigma-rules/community/linux/auditd/syscall/lnx_auditd_network_service_scanning.yml +0 -34
  1546. package/bundled-rules/sigma-rules/community/linux/auditd/syscall/lnx_auditd_split_file_into_pieces.yml +0 -23
  1547. package/bundled-rules/sigma-rules/community/linux/auditd/syscall/lnx_auditd_susp_discovery_sysinfo_syscall.yml +0 -33
  1548. package/bundled-rules/sigma-rules/community/linux/auditd/syscall/lnx_auditd_susp_exe_folders.yml +0 -44
  1549. package/bundled-rules/sigma-rules/community/linux/auditd/syscall/lnx_auditd_susp_special_file_creation_via_mknod_syscall.yml +0 -31
  1550. package/bundled-rules/sigma-rules/community/linux/auditd/syscall/lnx_auditd_web_rce.yml +0 -35
  1551. package/bundled-rules/sigma-rules/community/linux/builtin/clamav/lnx_clamav_relevant_message.yml +0 -25
  1552. package/bundled-rules/sigma-rules/community/linux/builtin/cron/lnx_cron_crontab_file_modification.yml +0 -23
  1553. package/bundled-rules/sigma-rules/community/linux/builtin/guacamole/lnx_guacamole_susp_guacamole.yml +0 -22
  1554. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_apt_equationgroup_lnx.yml +0 -82
  1555. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_buffer_overflows.yml +0 -29
  1556. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_clear_syslog.yml +0 -29
  1557. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_file_copy.yml +0 -26
  1558. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_ldso_preload_injection.yml +0 -23
  1559. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_potential_susp_ebpf_activity.yml +0 -21
  1560. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_privileged_user_creation.yml +0 -36
  1561. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_shell_clear_cmd_history.yml +0 -47
  1562. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_shell_susp_commands.yml +0 -59
  1563. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_shell_susp_log_entries.yml +0 -25
  1564. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_shell_susp_rev_shells.yml +0 -45
  1565. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_shellshock.yml +0 -24
  1566. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_susp_dev_tcp.yml +0 -31
  1567. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_susp_jexboss.yml +0 -23
  1568. package/bundled-rules/sigma-rules/community/linux/builtin/lnx_symlink_etc_passwd.yml +0 -22
  1569. package/bundled-rules/sigma-rules/community/linux/builtin/sshd/lnx_sshd_susp_ssh.yml +0 -33
  1570. package/bundled-rules/sigma-rules/community/linux/builtin/syslog/lnx_syslog_security_tools_disabling_syslog.yml +0 -29
  1571. package/bundled-rules/sigma-rules/community/linux/builtin/syslog/lnx_syslog_susp_named.yml +0 -24
  1572. package/bundled-rules/sigma-rules/community/linux/builtin/vsftpd/lnx_vsftpd_susp_error_messages.yml +0 -38
  1573. package/bundled-rules/sigma-rules/community/linux/file/file_event/file_event_lnx_python_path_configuration_files.yml +0 -33
  1574. package/bundled-rules/sigma-rules/community/linux/file/file_event/file_event_lnx_susp_long_filename_pattern.yml +0 -32
  1575. package/bundled-rules/sigma-rules/community/linux/file_event/file_event_lnx_doas_conf_creation.yml +0 -24
  1576. package/bundled-rules/sigma-rules/community/linux/file_event/file_event_lnx_persistence_cron_files.yml +0 -35
  1577. package/bundled-rules/sigma-rules/community/linux/file_event/file_event_lnx_persistence_sudoers_files.yml +0 -24
  1578. package/bundled-rules/sigma-rules/community/linux/file_event/file_event_lnx_susp_filename_with_embedded_base64_command.yml +0 -27
  1579. package/bundled-rules/sigma-rules/community/linux/file_event/file_event_lnx_susp_shell_script_under_profile_directory.yml +0 -27
  1580. package/bundled-rules/sigma-rules/community/linux/file_event/file_event_lnx_triple_cross_rootkit_lock_file.yml +0 -21
  1581. package/bundled-rules/sigma-rules/community/linux/file_event/file_event_lnx_triple_cross_rootkit_persistence.yml +0 -26
  1582. package/bundled-rules/sigma-rules/community/linux/file_event/file_event_lnx_wget_download_file_in_tmp_dir.yml +0 -27
  1583. package/bundled-rules/sigma-rules/community/linux/network_connection/net_connection_lnx_back_connect_shell_dev.yml +0 -26
  1584. package/bundled-rules/sigma-rules/community/linux/network_connection/net_connection_lnx_crypto_mining_indicators.yml +0 -43
  1585. package/bundled-rules/sigma-rules/community/linux/network_connection/net_connection_lnx_domain_localtonet_tunnel.yml +0 -30
  1586. package/bundled-rules/sigma-rules/community/linux/network_connection/net_connection_lnx_ngrok_tunnel.yml +0 -35
  1587. package/bundled-rules/sigma-rules/community/linux/network_connection/net_connection_lnx_susp_malware_callback_port.yml +0 -51
  1588. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_apt_shell_execution.yml +0 -28
  1589. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_at_command.yml +0 -28
  1590. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_auditctl_clear_rules.yml +0 -26
  1591. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_av_kaspersky_av_disabled.yml +0 -31
  1592. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_awk_shell_spawn.yml +0 -38
  1593. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_base64_decode.yml +0 -23
  1594. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_base64_execution.yml +0 -34
  1595. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_base64_shebang_cli.yml +0 -27
  1596. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_bash_interactive_shell.yml +0 -23
  1597. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_bpf_kprob_tracing_enabled.yml +0 -28
  1598. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_bpftrace_unsafe_option_usage.yml +0 -23
  1599. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_cap_setgid.yml +0 -30
  1600. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_cap_setuid.yml +0 -30
  1601. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_capa_discovery.yml +0 -25
  1602. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_capsh_shell_invocation.yml +0 -24
  1603. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_chattr_immutable_removal.yml +0 -25
  1604. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_chroot_execution.yml +0 -28
  1605. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_clear_logs.yml +0 -28
  1606. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_clear_syslog.yml +0 -87
  1607. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_clipboard_collection.yml +0 -28
  1608. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_cp_passwd_or_shadow_tmp.yml +0 -28
  1609. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_crontab_enumeration.yml +0 -25
  1610. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_crontab_removal.yml +0 -23
  1611. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_crypto_mining.yml +0 -42
  1612. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_curl_usage.yml +0 -22
  1613. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_curl_wget_exec_tmp.yml +0 -36
  1614. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_dd_file_overwrite.yml +0 -30
  1615. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_dd_process_injection.yml +0 -27
  1616. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_disable_ufw.yml +0 -28
  1617. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_doas_execution.yml +0 -23
  1618. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_env_shell_invocation.yml +0 -29
  1619. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_esxcli_network_discovery.yml +0 -31
  1620. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_esxcli_permission_change_admin.yml +0 -29
  1621. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_esxcli_storage_discovery.yml +0 -32
  1622. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_esxcli_syslog_config_change.yml +0 -30
  1623. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_esxcli_system_discovery.yml +0 -30
  1624. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_esxcli_user_account_creation.yml +0 -27
  1625. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_esxcli_vm_discovery.yml +0 -29
  1626. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_esxcli_vm_kill.yml +0 -29
  1627. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_esxcli_vsan_discovery.yml +0 -32
  1628. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_file_and_directory_discovery.yml +0 -35
  1629. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_file_deletion.yml +0 -25
  1630. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_find_shell_execution.yml +0 -33
  1631. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_flock_shell_execution.yml +0 -31
  1632. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_gcc_shell_execution.yml +0 -36
  1633. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_git_shell_execution.yml +0 -29
  1634. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_grep_os_arch_discovery.yml +0 -33
  1635. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_groupdel.yml +0 -24
  1636. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_install_root_certificate.yml +0 -24
  1637. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_install_suspicious_packages.yml +0 -49
  1638. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_iptables_flush_ufw.yml +0 -41
  1639. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_local_account.yml +0 -52
  1640. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_local_groups.yml +0 -34
  1641. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_malware_gobrat_grep_payload_discovery.yml +0 -28
  1642. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_mkfifo_named_pipe_creation.yml +0 -21
  1643. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_mkfifo_named_pipe_creation_susp_location.yml +0 -26
  1644. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_mount_hidepid.yml +0 -27
  1645. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_netcat_reverse_shell.yml +0 -59
  1646. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_nice_shell_execution.yml +0 -29
  1647. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_nohup.yml +0 -23
  1648. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_nohup_susp_execution.yml +0 -27
  1649. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_omigod_scx_runasprovider_executescript.yml +0 -35
  1650. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_omigod_scx_runasprovider_executeshellcommand.yml +0 -33
  1651. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_perl_reverse_shell.yml +0 -31
  1652. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_php_reverse_shell.yml +0 -36
  1653. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_pnscan_binary_cli_pattern.yml +0 -26
  1654. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_proxy_connection.yml +0 -23
  1655. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_pua_trufflehog.yml +0 -43
  1656. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_python_http_server_execution.yml +0 -36
  1657. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_python_pty_spawn.yml +0 -38
  1658. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_python_reverse_shell.yml +0 -32
  1659. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_python_shell_os_system.yml +0 -38
  1660. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_remote_access_tools_teamviewer_incoming_connection.yml +0 -31
  1661. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_remote_system_discovery.yml +0 -46
  1662. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_remove_package.yml +0 -42
  1663. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_rsync_shell_execution.yml +0 -44
  1664. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_rsync_shell_spawn.yml +0 -37
  1665. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_ruby_reverse_shell.yml +0 -34
  1666. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_schedule_task_job_cron.yml +0 -25
  1667. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_security_software_discovery.yml +0 -34
  1668. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_security_tools_disabling.yml +0 -83
  1669. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_services_stop_and_disable.yml +0 -26
  1670. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_setgid_setuid.yml +0 -28
  1671. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_ssh_shell_execution.yml +0 -36
  1672. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_ssm_agent_abuse.yml +0 -29
  1673. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_chmod_directories.yml +0 -27
  1674. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_container_residence_discovery.yml +0 -38
  1675. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_curl_fileupload.yml +0 -42
  1676. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_curl_useragent.yml +0 -28
  1677. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_dockerenv_recon.yml +0 -32
  1678. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_execution_tmp_folder.yml +0 -27
  1679. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_find_execution.yml +0 -33
  1680. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_git_clone.yml +0 -41
  1681. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_history_delete.yml +0 -34
  1682. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_history_recon.yml +0 -35
  1683. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_hktl_execution.yml +0 -97
  1684. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_inod_listing.yml +0 -31
  1685. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_interactive_bash.yml +0 -35
  1686. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_java_children.yml +0 -32
  1687. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_network_utilities_execution.yml +0 -43
  1688. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_pipe_shell.yml +0 -35
  1689. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_process_reading_sudoers.yml +0 -34
  1690. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_process_termination_via_kill.yml +0 -29
  1691. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_recon_indicators.yml +0 -25
  1692. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_running_process_discovery.yml +0 -32
  1693. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_sensitive_file_access.yml +0 -50
  1694. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_shell_child_process_from_parent_tmp_folder.yml +0 -31
  1695. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_susp_shell_script_exec_from_susp_location.yml +0 -35
  1696. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_system_info_discovery.yml +0 -29
  1697. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_system_network_connections_discovery.yml +0 -30
  1698. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_system_network_discovery.yml +0 -33
  1699. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_systemctl_mask_power_settings.yml +0 -32
  1700. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_touch_susp.yml +0 -24
  1701. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_triple_cross_rootkit_execve_hijack.yml +0 -22
  1702. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_triple_cross_rootkit_install.yml +0 -27
  1703. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_userdel.yml +0 -24
  1704. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_usermod_susp_group.yml +0 -25
  1705. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_vim_shell_execution.yml +0 -42
  1706. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_webshell_detection.yml +0 -50
  1707. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_wget_download_suspicious_directory.yml +0 -29
  1708. package/bundled-rules/sigma-rules/community/linux/process_creation/proc_creation_lnx_xterm_reverse_shell.yml +0 -24
  1709. package/bundled-rules/sigma-rules/community/macos/file/file_event/file_event_macos_python_path_configuration_files.yml +0 -33
  1710. package/bundled-rules/sigma-rules/community/macos/file_event/file_event_macos_emond_launch_daemon.yml +0 -27
  1711. package/bundled-rules/sigma-rules/community/macos/file_event/file_event_macos_susp_startup_item_created.yml +0 -30
  1712. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_applescript.yml +0 -27
  1713. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_base64_decode.yml +0 -23
  1714. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_binary_padding.yml +0 -31
  1715. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_change_file_time_attr.yml +0 -27
  1716. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_chflags_hidden_flag.yml +0 -32
  1717. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_clear_system_logs.yml +0 -31
  1718. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_clipboard_data_via_osascript.yml +0 -29
  1719. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_create_account.yml +0 -27
  1720. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_create_hidden_account.yml +0 -33
  1721. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_creds_from_keychain.yml +0 -30
  1722. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_csrutil_disable.yml +0 -27
  1723. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_csrutil_status.yml +0 -27
  1724. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_disable_security_tools.yml +0 -43
  1725. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_dscl_add_user_to_admin_group.yml +0 -32
  1726. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_dseditgroup_add_to_admin_group.yml +0 -30
  1727. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_dsenableroot_enable_root_account.yml +0 -30
  1728. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_file_and_directory_discovery.yml +0 -32
  1729. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_find_cred_in_files.yml +0 -25
  1730. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_gui_input_capture.yml +0 -40
  1731. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_hdiutil_create.yml +0 -23
  1732. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_hdiutil_mount.yml +0 -28
  1733. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_installer_susp_child_process.yml +0 -44
  1734. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_ioreg_discovery.yml +0 -47
  1735. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_jamf_susp_child.yml +0 -26
  1736. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_jamf_usage.yml +0 -31
  1737. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_jxa_in_memory_execution.yml +0 -34
  1738. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_launchctl_execution.yml +0 -33
  1739. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_local_account.yml +0 -42
  1740. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_local_groups.yml +0 -33
  1741. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_network_service_scanning.yml +0 -30
  1742. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_network_sniffing.yml +0 -27
  1743. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_nscurl_usage.yml +0 -32
  1744. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_office_susp_child_processes.yml +0 -42
  1745. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_osacompile_runonly_execution.yml +0 -25
  1746. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_payload_decoded_and_decrypted.yml +0 -31
  1747. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_pbpaste_execution.yml +0 -30
  1748. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_persistence_via_plistbuddy.yml +0 -30
  1749. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_remote_access_tools_meshagent_arguments.yml +0 -30
  1750. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_remote_access_tools_renamed_meshagent_execution.yml +0 -39
  1751. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_remote_access_tools_teamviewer_incoming_connection.yml +0 -31
  1752. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_remote_system_discovery.yml +0 -46
  1753. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_schedule_task_job_cron.yml +0 -25
  1754. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_screencapture.yml +0 -23
  1755. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_security_software_discovery.yml +0 -39
  1756. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_space_after_filename.yml +0 -24
  1757. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_split_file_into_pieces.yml +0 -22
  1758. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_susp_browser_child_process.yml +0 -78
  1759. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_susp_execution_macos_script_editor.yml +0 -55
  1760. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_susp_find_execution.yml +0 -33
  1761. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_susp_histfile_operations.yml +0 -29
  1762. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_susp_in_memory_download_and_compile.yml +0 -25
  1763. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_susp_macos_firmware_activity.yml +0 -28
  1764. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_susp_system_network_discovery.yml +0 -34
  1765. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_suspicious_applet_behaviour.yml +0 -24
  1766. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_swvers_discovery.yml +0 -29
  1767. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_sysadminctl_add_user_to_admin_group.yml +0 -32
  1768. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_sysadminctl_enable_guest_account.yml +0 -29
  1769. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_sysctl_discovery.yml +0 -37
  1770. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_system_network_connections_discovery.yml +0 -27
  1771. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_system_profiler_discovery.yml +0 -38
  1772. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_system_shutdown_reboot.yml +0 -25
  1773. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_tail_base64_decode_from_image.yml +0 -46
  1774. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_tmutil_delete_backup.yml +0 -27
  1775. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_tmutil_disable_backup.yml +0 -27
  1776. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_tmutil_exclude_file_from_backup.yml +0 -27
  1777. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_wizardupdate_malware_infection.yml +0 -28
  1778. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_xattr_gatekeeper_bypass.yml +0 -26
  1779. package/bundled-rules/sigma-rules/community/macos/process_creation/proc_creation_macos_xcsset_malware_infection.yml +0 -47
  1780. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_clear_logs.yml +0 -24
  1781. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_collect_data.yml +0 -31
  1782. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_crypto_actions.yml +0 -26
  1783. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_disable_logging.yml +0 -23
  1784. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_discovery.yml +0 -40
  1785. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_dos.yml +0 -24
  1786. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_file_deletion.yml +0 -25
  1787. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_input_capture.yml +0 -22
  1788. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_local_accounts.yml +0 -23
  1789. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_modify_config.yml +0 -34
  1790. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_moving_data.yml +0 -30
  1791. package/bundled-rules/sigma-rules/community/network/cisco/aaa/cisco_cli_net_sniff.yml +0 -23
  1792. package/bundled-rules/sigma-rules/community/network/cisco/bgp/cisco_bgp_md5_auth_failed.yml +0 -32
  1793. package/bundled-rules/sigma-rules/community/network/cisco/ldp/cisco_ldp_md5_auth_failed.yml +0 -32
  1794. package/bundled-rules/sigma-rules/community/network/dns/net_dns_external_service_interaction_domains.yml +0 -55
  1795. package/bundled-rules/sigma-rules/community/network/dns/net_dns_mal_cobaltstrike.yml +0 -26
  1796. package/bundled-rules/sigma-rules/community/network/dns/net_dns_pua_cryptocoin_mining_xmr.yml +0 -42
  1797. package/bundled-rules/sigma-rules/community/network/dns/net_dns_susp_b64_queries.yml +0 -23
  1798. package/bundled-rules/sigma-rules/community/network/dns/net_dns_susp_telegram_api.yml +0 -24
  1799. package/bundled-rules/sigma-rules/community/network/dns/net_dns_susp_txt_exec_strings.yml +0 -26
  1800. package/bundled-rules/sigma-rules/community/network/dns/net_dns_wannacry_killswitch_domain.yml +0 -26
  1801. package/bundled-rules/sigma-rules/community/network/firewall/net_firewall_cleartext_protocols.yml +0 -89
  1802. package/bundled-rules/sigma-rules/community/network/fortinet/fortigate/fortinet_fortigate_new_admin_account_created.yml +0 -25
  1803. package/bundled-rules/sigma-rules/community/network/fortinet/fortigate/fortinet_fortigate_new_firewall_address_object.yml +0 -25
  1804. package/bundled-rules/sigma-rules/community/network/fortinet/fortigate/fortinet_fortigate_new_firewall_policy_added.yml +0 -25
  1805. package/bundled-rules/sigma-rules/community/network/fortinet/fortigate/fortinet_fortigate_new_local_user_created.yml +0 -27
  1806. package/bundled-rules/sigma-rules/community/network/fortinet/fortigate/fortinet_fortigate_new_vpn_ssl_web_portal.yml +0 -28
  1807. package/bundled-rules/sigma-rules/community/network/fortinet/fortigate/fortinet_fortigate_user_group_modified.yml +0 -28
  1808. package/bundled-rules/sigma-rules/community/network/fortinet/fortigate/fortinet_fortigate_vpn_ssl_settings_modified.yml +0 -28
  1809. package/bundled-rules/sigma-rules/community/network/huawei/bgp/huawei_bgp_auth_failed.yml +0 -32
  1810. package/bundled-rules/sigma-rules/community/network/juniper/bgp/juniper_bgp_missing_md5.yml +0 -32
  1811. package/bundled-rules/sigma-rules/community/network/net_dns_low_reputation_etld.yml +0 -42
  1812. package/bundled-rules/sigma-rules/community/network/zeek/zeek_dce_rpc_mitre_bzar_execution.yml +0 -55
  1813. package/bundled-rules/sigma-rules/community/network/zeek/zeek_dce_rpc_mitre_bzar_persistence.yml +0 -40
  1814. package/bundled-rules/sigma-rules/community/network/zeek/zeek_dce_rpc_potential_petit_potam_efs_rpc_call.yml +0 -31
  1815. package/bundled-rules/sigma-rules/community/network/zeek/zeek_dce_rpc_smb_spoolss_named_pipe.yml +0 -25
  1816. package/bundled-rules/sigma-rules/community/network/zeek/zeek_default_cobalt_strike_certificate.yml +0 -22
  1817. package/bundled-rules/sigma-rules/community/network/zeek/zeek_dns_kerberos_coercion_via_dns_object_spn_spoofing.yml +0 -38
  1818. package/bundled-rules/sigma-rules/community/network/zeek/zeek_dns_mining_pools.yml +0 -100
  1819. package/bundled-rules/sigma-rules/community/network/zeek/zeek_dns_nkn.yml +0 -24
  1820. package/bundled-rules/sigma-rules/community/network/zeek/zeek_dns_susp_zbit_flag.yml +0 -56
  1821. package/bundled-rules/sigma-rules/community/network/zeek/zeek_dns_torproxy.yml +0 -72
  1822. package/bundled-rules/sigma-rules/community/network/zeek/zeek_http_executable_download_from_webdav.yml +0 -27
  1823. package/bundled-rules/sigma-rules/community/network/zeek/zeek_http_susp_file_ext_from_susp_tld.yml +0 -85
  1824. package/bundled-rules/sigma-rules/community/network/zeek/zeek_http_webdav_put_request.yml +0 -30
  1825. package/bundled-rules/sigma-rules/community/network/zeek/zeek_rdp_public_listener.yml +0 -33
  1826. package/bundled-rules/sigma-rules/community/network/zeek/zeek_smb_converted_win_atsvc_task.yml +0 -32
  1827. package/bundled-rules/sigma-rules/community/network/zeek/zeek_smb_converted_win_impacket_secretdump.yml +0 -28
  1828. package/bundled-rules/sigma-rules/community/network/zeek/zeek_smb_converted_win_lm_namedpipe.yml +0 -42
  1829. package/bundled-rules/sigma-rules/community/network/zeek/zeek_smb_converted_win_susp_psexec.yml +0 -33
  1830. package/bundled-rules/sigma-rules/community/network/zeek/zeek_smb_converted_win_susp_raccess_sensitive_fext.yml +0 -37
  1831. package/bundled-rules/sigma-rules/community/network/zeek/zeek_smb_converted_win_transferring_files_with_credential_data.yml +0 -35
  1832. package/bundled-rules/sigma-rules/community/network/zeek/zeek_susp_kerberos_rc4.yml +0 -25
  1833. package/bundled-rules/sigma-rules/community/other/netflow_cleartext_protocols.yml +0 -83
  1834. package/bundled-rules/sigma-rules/community/product/qualys/qualys_default_credentials_usage.yml +0 -112
  1835. package/bundled-rules/sigma-rules/community/product/qualys/qualys_host_without_firewall.yml +0 -31
  1836. package/bundled-rules/sigma-rules/community/web/product/apache/web_apache_segfault.yml +0 -22
  1837. package/bundled-rules/sigma-rules/community/web/product/apache/web_apache_threading_error.yml +0 -24
  1838. package/bundled-rules/sigma-rules/community/web/product/nginx/web_nginx_core_dump.yml +0 -22
  1839. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_download_susp_dyndns.yml +0 -112
  1840. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_download_susp_tlds_blacklist.yml +0 -115
  1841. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_download_susp_tlds_whitelist.yml +0 -66
  1842. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_downloadcradle_webdav.yml +0 -24
  1843. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_f5_tm_utility_bash_api_request.yml +0 -26
  1844. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_hello_world_user_agent.yml +0 -24
  1845. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_hktl_baby_shark_default_agent_url.yml +0 -21
  1846. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_hktl_cobalt_strike_malleable_c2_requests.yml +0 -60
  1847. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_hktl_empire_ua_uri_patterns.yml +0 -27
  1848. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_pua_advanced_ip_scanner_update_check.yml +0 -32
  1849. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_pwndrop.yml +0 -23
  1850. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_raw_paste_service_access.yml +0 -31
  1851. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_susp_class_extension_request.yml +0 -23
  1852. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_susp_flash_download_loc.yml +0 -28
  1853. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_susp_ipfs_cred_harvest.yml +0 -23
  1854. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_telegram_api.yml +0 -30
  1855. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_apt.yml +0 -65
  1856. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_base64_encoded.yml +0 -27
  1857. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_bitsadmin_susp_ip.yml +0 -35
  1858. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_bitsadmin_susp_tld.yml +0 -33
  1859. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_cryptominer.yml +0 -26
  1860. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_empty.yml +0 -25
  1861. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_frameworks.yml +0 -57
  1862. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_hacktool.yml +0 -73
  1863. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_malware.yml +0 -142
  1864. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_powershell.yml +0 -23
  1865. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_rclone.yml +0 -21
  1866. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_susp.yml +0 -50
  1867. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_ua_susp_base64.yml +0 -25
  1868. package/bundled-rules/sigma-rules/community/web/proxy_generic/proxy_webdav_external_execution.yml +0 -55
  1869. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_f5_tm_utility_bash_api_request.yml +0 -27
  1870. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_iis_tilt_shortname_scan.yml +0 -31
  1871. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_java_payload_in_access_logs.yml +0 -36
  1872. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_jndi_exploit.yml +0 -41
  1873. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_path_traversal_exploitation_attempt.yml +0 -29
  1874. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_source_code_enumeration.yml +0 -22
  1875. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_sql_injection_in_access_logs.yml +0 -60
  1876. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_ssti_in_access_logs.yml +0 -35
  1877. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_susp_useragents.yml +0 -28
  1878. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_susp_windows_path_uri.yml +0 -28
  1879. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_webshell_regeorg.yml +0 -31
  1880. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_win_webshells_in_access_logs.yml +0 -62
  1881. package/bundled-rules/sigma-rules/community/web/webserver_generic/web_xss_in_access_logs.yml +0 -43
  1882. package/bundled-rules/sigma-rules/community/windows/builtin/application/Other/win_av_relevant_match.yml +0 -111
  1883. package/bundled-rules/sigma-rules/community/windows/builtin/application/application_error/win_application_error_lsass_crash.yml +0 -29
  1884. package/bundled-rules/sigma-rules/community/windows/builtin/application/application_error/win_application_error_msmpeng_crash.yml +0 -32
  1885. package/bundled-rules/sigma-rules/community/windows/builtin/application/esent/win_esent_ntdsutil_abuse.yml +0 -29
  1886. package/bundled-rules/sigma-rules/community/windows/builtin/application/esent/win_esent_ntdsutil_abuse_susp_location.yml +0 -35
  1887. package/bundled-rules/sigma-rules/community/windows/builtin/application/microsoft-windows_audit_cve/win_audit_cve.yml +0 -42
  1888. package/bundled-rules/sigma-rules/community/windows/builtin/application/microsoft_windows_backup/win_susp_backup_delete.yml +0 -24
  1889. package/bundled-rules/sigma-rules/community/windows/builtin/application/microsoft_windows_software_restriction_policies/win_software_restriction_policies_block.yml +0 -30
  1890. package/bundled-rules/sigma-rules/community/windows/builtin/application/msiinstaller/win_builtin_remove_application.yml +0 -27
  1891. package/bundled-rules/sigma-rules/community/windows/builtin/application/msiinstaller/win_msi_install_from_susp_locations.yml +0 -38
  1892. package/bundled-rules/sigma-rules/community/windows/builtin/application/msiinstaller/win_msi_install_from_web.yml +0 -27
  1893. package/bundled-rules/sigma-rules/community/windows/builtin/application/msiinstaller/win_software_atera_rmm_agent_install.yml +0 -24
  1894. package/bundled-rules/sigma-rules/community/windows/builtin/application/mssqlserver/win_mssql_add_sysadmin_account.yml +0 -27
  1895. package/bundled-rules/sigma-rules/community/windows/builtin/application/mssqlserver/win_mssql_destructive_query.yml +0 -31
  1896. package/bundled-rules/sigma-rules/community/windows/builtin/application/mssqlserver/win_mssql_disable_audit_settings.yml +0 -29
  1897. package/bundled-rules/sigma-rules/community/windows/builtin/application/mssqlserver/win_mssql_failed_logon.yml +0 -28
  1898. package/bundled-rules/sigma-rules/community/windows/builtin/application/mssqlserver/win_mssql_failed_logon_from_external_network.yml +0 -51
  1899. package/bundled-rules/sigma-rules/community/windows/builtin/application/mssqlserver/win_mssql_sp_procoption_set.yml +0 -28
  1900. package/bundled-rules/sigma-rules/community/windows/builtin/application/mssqlserver/win_mssql_xp_cmdshell_audit_log.yml +0 -29
  1901. package/bundled-rules/sigma-rules/community/windows/builtin/application/mssqlserver/win_mssql_xp_cmdshell_change.yml +0 -27
  1902. package/bundled-rules/sigma-rules/community/windows/builtin/application/screenconnect/win_app_remote_access_tools_screenconnect_command_exec.yml +0 -27
  1903. package/bundled-rules/sigma-rules/community/windows/builtin/application/screenconnect/win_app_remote_access_tools_screenconnect_file_transfer.yml +0 -27
  1904. package/bundled-rules/sigma-rules/community/windows/builtin/application/windows_error_reporting/win_application_msmpeng_crash_wer.yml +0 -29
  1905. package/bundled-rules/sigma-rules/community/windows/builtin/applocker/win_applocker_application_was_prevented_from_running.yml +0 -34
  1906. package/bundled-rules/sigma-rules/community/windows/builtin/appmodel_runtime/win_appmodel_runtime_sysinternals_tools_appx_execution.yml +0 -30
  1907. package/bundled-rules/sigma-rules/community/windows/builtin/appxdeployment_server/win_appxdeployment_server_applocker_block.yml +0 -21
  1908. package/bundled-rules/sigma-rules/community/windows/builtin/appxdeployment_server/win_appxdeployment_server_appx_downloaded_from_file_sharing_domains.yml +0 -56
  1909. package/bundled-rules/sigma-rules/community/windows/builtin/appxdeployment_server/win_appxdeployment_server_appx_package_deployment_failed_signing_requirements.yml +0 -26
  1910. package/bundled-rules/sigma-rules/community/windows/builtin/appxdeployment_server/win_appxdeployment_server_appx_package_in_staging_directory.yml +0 -39
  1911. package/bundled-rules/sigma-rules/community/windows/builtin/appxdeployment_server/win_appxdeployment_server_mal_appx_names.yml +0 -28
  1912. package/bundled-rules/sigma-rules/community/windows/builtin/appxdeployment_server/win_appxdeployment_server_policy_block.yml +0 -31
  1913. package/bundled-rules/sigma-rules/community/windows/builtin/appxdeployment_server/win_appxdeployment_server_uncommon_package_locations.yml +0 -52
  1914. package/bundled-rules/sigma-rules/community/windows/builtin/appxdeployment_server/win_appxpackaging_server_full_trust_package_installation.yml +0 -41
  1915. package/bundled-rules/sigma-rules/community/windows/builtin/appxdeployment_server/win_appxpackaging_server_successful_package_installation.yml +0 -25
  1916. package/bundled-rules/sigma-rules/community/windows/builtin/appxdeployment_server/win_appxpackaging_server_unsigned_package_installation.yml +0 -30
  1917. package/bundled-rules/sigma-rules/community/windows/builtin/appxpackaging_om/win_appxpackaging_om_sups_appx_signature.yml +0 -24
  1918. package/bundled-rules/sigma-rules/community/windows/builtin/bits_client/win_bits_client_new_job_via_bitsadmin.yml +0 -24
  1919. package/bundled-rules/sigma-rules/community/windows/builtin/bits_client/win_bits_client_new_job_via_powershell.yml +0 -26
  1920. package/bundled-rules/sigma-rules/community/windows/builtin/bits_client/win_bits_client_new_transfer_saving_susp_extensions.yml +0 -38
  1921. package/bundled-rules/sigma-rules/community/windows/builtin/bits_client/win_bits_client_new_transfer_via_file_sharing_domains.yml +0 -59
  1922. package/bundled-rules/sigma-rules/community/windows/builtin/bits_client/win_bits_client_new_transfer_via_ip_address.yml +0 -75
  1923. package/bundled-rules/sigma-rules/community/windows/builtin/bits_client/win_bits_client_new_transfer_via_uncommon_tld.yml +0 -33
  1924. package/bundled-rules/sigma-rules/community/windows/builtin/bits_client/win_bits_client_new_trasnfer_susp_local_folder.yml +0 -28
  1925. package/bundled-rules/sigma-rules/community/windows/builtin/capi2/win_capi2_acquire_certificate_private_key.yml +0 -22
  1926. package/bundled-rules/sigma-rules/community/windows/builtin/certificate_services_client_lifecycle_system/win_certificateservicesclient_lifecycle_system_cert_exported.yml +0 -21
  1927. package/bundled-rules/sigma-rules/community/windows/builtin/code_integrity/win_codeintegrity_attempted_dll_load.yml +0 -125
  1928. package/bundled-rules/sigma-rules/community/windows/builtin/code_integrity/win_codeintegrity_blocked_protected_process_file.yml +0 -22
  1929. package/bundled-rules/sigma-rules/community/windows/builtin/code_integrity/win_codeintegrity_enforced_policy_block.yml +0 -25
  1930. package/bundled-rules/sigma-rules/community/windows/builtin/code_integrity/win_codeintegrity_revoked_driver_blocked.yml +0 -24
  1931. package/bundled-rules/sigma-rules/community/windows/builtin/code_integrity/win_codeintegrity_revoked_driver_loaded.yml +0 -24
  1932. package/bundled-rules/sigma-rules/community/windows/builtin/code_integrity/win_codeintegrity_revoked_image_blocked.yml +0 -22
  1933. package/bundled-rules/sigma-rules/community/windows/builtin/code_integrity/win_codeintegrity_revoked_image_loaded.yml +0 -24
  1934. package/bundled-rules/sigma-rules/community/windows/builtin/code_integrity/win_codeintegrity_unsigned_driver_loaded.yml +0 -22
  1935. package/bundled-rules/sigma-rules/community/windows/builtin/code_integrity/win_codeintegrity_unsigned_image_loaded.yml +0 -22
  1936. package/bundled-rules/sigma-rules/community/windows/builtin/code_integrity/win_codeintegrity_whql_failure.yml +0 -29
  1937. package/bundled-rules/sigma-rules/community/windows/builtin/diagnosis/scripted/win_diagnosis_scripted_load_remote_diagcab.yml +0 -22
  1938. package/bundled-rules/sigma-rules/community/windows/builtin/dns_client/win_dns_client_anonymfiles_com.yml +0 -26
  1939. package/bundled-rules/sigma-rules/community/windows/builtin/dns_client/win_dns_client_mal_cobaltstrike.yml +0 -32
  1940. package/bundled-rules/sigma-rules/community/windows/builtin/dns_client/win_dns_client_mega_nz.yml +0 -26
  1941. package/bundled-rules/sigma-rules/community/windows/builtin/dns_client/win_dns_client_put_io.yml +0 -24
  1942. package/bundled-rules/sigma-rules/community/windows/builtin/dns_client/win_dns_client_tor_onion.yml +0 -75
  1943. package/bundled-rules/sigma-rules/community/windows/builtin/dns_client/win_dns_client_ufile_io.yml +0 -27
  1944. package/bundled-rules/sigma-rules/community/windows/builtin/dns_server/win_dns_server_failed_dns_zone_transfer.yml +0 -21
  1945. package/bundled-rules/sigma-rules/community/windows/builtin/dns_server/win_dns_server_susp_server_level_plugin_dll.yml +0 -34
  1946. package/bundled-rules/sigma-rules/community/windows/builtin/driverframeworks/win_usb_device_plugged.yml +0 -27
  1947. package/bundled-rules/sigma-rules/community/windows/builtin/firewall_as/win_firewall_as_add_rule.yml +0 -65
  1948. package/bundled-rules/sigma-rules/community/windows/builtin/firewall_as/win_firewall_as_add_rule_susp_folder.yml +0 -39
  1949. package/bundled-rules/sigma-rules/community/windows/builtin/firewall_as/win_firewall_as_add_rule_wmiprvse.yml +0 -30
  1950. package/bundled-rules/sigma-rules/community/windows/builtin/firewall_as/win_firewall_as_change_rule.yml +0 -38
  1951. package/bundled-rules/sigma-rules/community/windows/builtin/firewall_as/win_firewall_as_delete_all_rules.yml +0 -28
  1952. package/bundled-rules/sigma-rules/community/windows/builtin/firewall_as/win_firewall_as_delete_rule.yml +0 -36
  1953. package/bundled-rules/sigma-rules/community/windows/builtin/firewall_as/win_firewall_as_failed_load_gpo.yml +0 -20
  1954. package/bundled-rules/sigma-rules/community/windows/builtin/firewall_as/win_firewall_as_reset_config.yml +0 -22
  1955. package/bundled-rules/sigma-rules/community/windows/builtin/firewall_as/win_firewall_as_setting_change.yml +0 -26
  1956. package/bundled-rules/sigma-rules/community/windows/builtin/iis-configuration/win_iis_logging_etw_disabled.yml +0 -29
  1957. package/bundled-rules/sigma-rules/community/windows/builtin/iis-configuration/win_iis_logging_http_disabled.yml +0 -27
  1958. package/bundled-rules/sigma-rules/community/windows/builtin/iis-configuration/win_iis_module_added.yml +0 -44
  1959. package/bundled-rules/sigma-rules/community/windows/builtin/iis-configuration/win_iis_module_removed.yml +0 -28
  1960. package/bundled-rules/sigma-rules/community/windows/builtin/ldap/win_ldap_recon.yml +0 -91
  1961. package/bundled-rules/sigma-rules/community/windows/builtin/lsa_server/win_lsa_server_normal_user_admin.yml +0 -37
  1962. package/bundled-rules/sigma-rules/community/windows/builtin/msexchange/win_exchange_proxylogon_oabvirtualdir.yml +0 -29
  1963. package/bundled-rules/sigma-rules/community/windows/builtin/msexchange/win_exchange_proxyshell_certificate_generation.yml +0 -31
  1964. package/bundled-rules/sigma-rules/community/windows/builtin/msexchange/win_exchange_proxyshell_mailbox_export.yml +0 -32
  1965. package/bundled-rules/sigma-rules/community/windows/builtin/msexchange/win_exchange_proxyshell_remove_mailbox_export.yml +0 -25
  1966. package/bundled-rules/sigma-rules/community/windows/builtin/msexchange/win_exchange_set_oabvirtualdirectory_externalurl.yml +0 -26
  1967. package/bundled-rules/sigma-rules/community/windows/builtin/msexchange/win_exchange_transportagent.yml +0 -25
  1968. package/bundled-rules/sigma-rules/community/windows/builtin/msexchange/win_exchange_transportagent_failed.yml +0 -24
  1969. package/bundled-rules/sigma-rules/community/windows/builtin/ntlm/win_susp_ntlm_auth.yml +0 -24
  1970. package/bundled-rules/sigma-rules/community/windows/builtin/ntlm/win_susp_ntlm_brute_force.yml +0 -32
  1971. package/bundled-rules/sigma-rules/community/windows/builtin/ntlm/win_susp_ntlm_rdp.yml +0 -26
  1972. package/bundled-rules/sigma-rules/community/windows/builtin/openssh/win_sshd_openssh_server_listening_on_socket.yml +0 -27
  1973. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_access_token_abuse.yml +0 -29
  1974. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_admin_rdp_login.yml +0 -33
  1975. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_diagtrack_eop_default_login_username.yml +0 -22
  1976. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_member_added_security_enabled_global_group.yml +0 -31
  1977. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_member_removed_security_enabled_global_group.yml +0 -31
  1978. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_overpass_the_hash.yml +0 -27
  1979. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_pass_the_hash_2.yml +0 -36
  1980. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_rdp_localhost_login.yml +0 -27
  1981. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_scrcons_remote_wmi_scripteventconsumer.yml +0 -31
  1982. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_security_enabled_global_group_deleted.yml +0 -31
  1983. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_successful_external_remote_rdp_login.yml +0 -45
  1984. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_successful_external_remote_smb_login.yml +0 -45
  1985. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_susp_failed_logon_source.yml +0 -40
  1986. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_susp_logon_newcredentials.yml +0 -23
  1987. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_susp_privesc_kerberos_relay_over_ldap.yml +0 -34
  1988. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_susp_rottenpotato.yml +0 -30
  1989. package/bundled-rules/sigma-rules/community/windows/builtin/security/account_management/win_security_susp_wmi_login.yml +0 -24
  1990. package/bundled-rules/sigma-rules/community/windows/builtin/security/object_access/win_security_wfp_endpoint_agent_blocked.yml +0 -96
  1991. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_aadhealth_mon_agent_regkey_access.yml +0 -36
  1992. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_aadhealth_svc_agent_regkey_access.yml +0 -38
  1993. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_account_backdoor_dcsync_rights.yml +0 -35
  1994. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_account_discovery.yml +0 -40
  1995. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_ad_object_writedac_access.yml +0 -29
  1996. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_ad_replication_non_machine_account.yml +0 -32
  1997. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_ad_user_enumeration.yml +0 -43
  1998. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_adcs_certificate_template_configuration_vulnerability.yml +0 -29
  1999. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_adcs_certificate_template_configuration_vulnerability_eku.yml +0 -43
  2000. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_add_remove_computer.yml +0 -25
  2001. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_admin_logon.yml +0 -34
  2002. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_admin_share_access.yml +0 -26
  2003. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_alert_active_directory_user_control.yml +0 -26
  2004. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_alert_ad_user_backdoors.yml +0 -42
  2005. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_alert_enable_weak_encryption.yml +0 -89
  2006. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_alert_ruler.yml +0 -39
  2007. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_atsvc_task.yml +0 -31
  2008. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_audit_log_cleared.yml +0 -35
  2009. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_camera_microphone_access.yml +0 -29
  2010. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_cobaltstrike_service_installs.yml +0 -46
  2011. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_codeintegrity_check_failure.yml +0 -34
  2012. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_dce_rpc_smb_spoolss_named_pipe.yml +0 -26
  2013. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_dcom_iertutil_dll_hijack.yml +0 -26
  2014. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_dcsync.yml +0 -42
  2015. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_default_domain_gpo_modification.yml +0 -38
  2016. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_device_installation_blocked.yml +0 -22
  2017. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_disable_event_auditing.yml +0 -51
  2018. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_disable_event_auditing_critical.yml +0 -50
  2019. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_dot_net_etw_tamper.yml +0 -46
  2020. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_dpapi_domain_backupkey_extraction.yml +0 -25
  2021. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_dpapi_domain_masterkey_backup_attempt.yml +0 -22
  2022. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_exploit_cve_2020_1472.yml +0 -29
  2023. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_external_device.yml +0 -27
  2024. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_file_access_browser_credential.yml +0 -56
  2025. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_gpo_scheduledtasks.yml +0 -41
  2026. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_hidden_user_creation.yml +0 -25
  2027. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_hktl_edr_silencer.yml +0 -27
  2028. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_hktl_nofilter.yml +0 -32
  2029. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_hybridconnectionmgr_svc_installation.yml +0 -25
  2030. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_impacket_psexec.yml +0 -28
  2031. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_impacket_secretdump.yml +0 -29
  2032. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_invoke_obfuscation_clip_services_security.yml +0 -33
  2033. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_invoke_obfuscation_obfuscated_iex_services_security.yml +0 -34
  2034. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_invoke_obfuscation_stdin_services_security.yml +0 -39
  2035. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_invoke_obfuscation_var_services_security.yml +0 -38
  2036. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_invoke_obfuscation_via_compress_services_security.yml +0 -35
  2037. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_invoke_obfuscation_via_rundll_services_security.yml +0 -33
  2038. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_invoke_obfuscation_via_stdin_services_security.yml +0 -35
  2039. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_invoke_obfuscation_via_use_clip_services_security.yml +0 -29
  2040. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_invoke_obfuscation_via_use_mshta_services_security.yml +0 -33
  2041. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_invoke_obfuscation_via_use_rundll32_services_security.yml +0 -38
  2042. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_invoke_obfuscation_via_var_services_security.yml +0 -43
  2043. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_iso_mount.yml +0 -34
  2044. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_kerberoasting_activity.yml +0 -34
  2045. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_kerberos_asrep_roasting.yml +0 -26
  2046. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_kerberos_coercion_via_dns_object.yml +0 -55
  2047. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_lm_namedpipe.yml +0 -46
  2048. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_lsass_access_non_system_account.yml +0 -57
  2049. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_mal_creddumper.yml +0 -41
  2050. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_mal_wceaux_dll.yml +0 -27
  2051. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_metasploit_authentication.yml +0 -30
  2052. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_metasploit_or_impacket_smb_psexec_service_install.yml +0 -35
  2053. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_meterpreter_or_cobaltstrike_getsystem_service_install.yml +0 -48
  2054. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_net_ntlm_downgrade.yml +0 -37
  2055. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_net_share_obj_susp_desktop_ini.yml +0 -31
  2056. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_new_or_renamed_user_account_with_dollar_sign.yml +0 -30
  2057. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_not_allowed_rdp_access.yml +0 -24
  2058. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_password_policy_enumerated.yml +0 -23
  2059. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_pcap_drivers.yml +0 -34
  2060. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_petitpotam_network_share.yml +0 -28
  2061. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_petitpotam_susp_tgt_request.yml +0 -36
  2062. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_possible_dc_shadow.yml +0 -34
  2063. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_potential_pass_the_hash.yml +0 -33
  2064. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_powershell_script_installed_as_service.yml +0 -29
  2065. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_protected_storage_service_access.yml +0 -24
  2066. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_rdp_reverse_tunnel.yml +0 -44
  2067. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_register_new_logon_process_by_rubeus.yml +0 -25
  2068. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_registry_permissions_weakness_check.yml +0 -32
  2069. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_remote_powershell_session.yml +0 -26
  2070. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_remote_registry_management_via_reg.yml +0 -31
  2071. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_replay_attack_detected.yml +0 -22
  2072. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_sam_registry_hive_handle_request.yml +0 -26
  2073. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_scheduled_task_deletion.yml +0 -32
  2074. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_scm_database_handle_failure.yml +0 -29
  2075. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_scm_database_privileged_operation.yml +0 -29
  2076. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_sdelete_potential_secure_deletion.yml +0 -36
  2077. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_service_install_remote_access_software.yml +0 -53
  2078. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_service_installation_by_unusal_client.yml +0 -32
  2079. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_signal_sensitive_config_access.yml +0 -36
  2080. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_smb_file_creation_admin_shares.yml +0 -29
  2081. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_add_domain_trust.yml +0 -23
  2082. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_add_sid_history.yml +0 -33
  2083. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_computer_name.yml +0 -33
  2084. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_dsrm_password_change.yml +0 -30
  2085. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_failed_logon_reasons.yml +0 -45
  2086. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_group_policy_abuse_privilege_addition.yml +0 -28
  2087. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_group_policy_startup_script_added_to_gpo.yml +0 -43
  2088. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_interactive_logons.yml +0 -37
  2089. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_kerberos_manipulation.yml +0 -57
  2090. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_ldap_dataexchange.yml +0 -30
  2091. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_local_anon_logon_created.yml +0 -26
  2092. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_logon_explicit_credentials.yml +0 -40
  2093. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_lsass_dump.yml +0 -25
  2094. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_lsass_dump_generic.yml +0 -114
  2095. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_net_recon_activity.yml +0 -33
  2096. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_opened_encrypted_zip.yml +0 -24
  2097. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_opened_encrypted_zip_filename.yml +0 -35
  2098. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_opened_encrypted_zip_outlook.yml +0 -26
  2099. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_outbound_kerberos_connection.yml +0 -49
  2100. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_possible_shadow_credentials_added.yml +0 -36
  2101. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_psexec.yml +0 -30
  2102. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_raccess_sensitive_fext.yml +0 -39
  2103. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_rc4_kerberos.yml +0 -28
  2104. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_scheduled_task_creation.yml +0 -61
  2105. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_scheduled_task_delete_or_disable.yml +0 -48
  2106. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_scheduled_task_update.yml +0 -63
  2107. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_susp_time_modification.yml +0 -34
  2108. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_svcctl_remote_service.yml +0 -27
  2109. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_syskey_registry_access.yml +0 -30
  2110. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_sysmon_channel_reference_deletion.yml +0 -37
  2111. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_tap_driver_installation.yml +0 -28
  2112. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_teams_suspicious_objectaccess.yml +0 -27
  2113. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_transf_files_with_cred_data_via_network_shares.yml +0 -39
  2114. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_user_added_to_local_administrators.yml +0 -32
  2115. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_user_couldnt_call_priv_service_lsaregisterlogonprocess.yml +0 -26
  2116. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_user_creation.yml +0 -24
  2117. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_user_driver_loaded.yml +0 -57
  2118. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_user_logoff.yml +0 -25
  2119. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_vssaudit_secevent_source_registration.yml +0 -25
  2120. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_windows_defender_exclusions_registry_modified.yml +0 -30
  2121. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_windows_defender_exclusions_write_access.yml +0 -35
  2122. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_wmi_persistence.yml +0 -29
  2123. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_wmiprvse_wbemcomn_dll_hijack.yml +0 -27
  2124. package/bundled-rules/sigma-rules/community/windows/builtin/security/win_security_workstation_was_locked.yml +0 -47
  2125. package/bundled-rules/sigma-rules/community/windows/builtin/security_mitigations/win_security_mitigations_defender_load_unsigned_dll.yml +0 -29
  2126. package/bundled-rules/sigma-rules/community/windows/builtin/security_mitigations/win_security_mitigations_unsigned_dll_from_susp_location.yml +0 -33
  2127. package/bundled-rules/sigma-rules/community/windows/builtin/servicebus/win_hybridconnectionmgr_svc_running.yml +0 -30
  2128. package/bundled-rules/sigma-rules/community/windows/builtin/shell_core/win_shell_core_susp_packages_installed.yml +0 -34
  2129. package/bundled-rules/sigma-rules/community/windows/builtin/smbclient/security/win_smbclient_security_susp_failed_guest_logon.yml +0 -26
  2130. package/bundled-rules/sigma-rules/community/windows/builtin/smbserver/connectivity/win_smbserver_connectivity_unsigned_and_unencrypted_share_connection.yml +0 -55
  2131. package/bundled-rules/sigma-rules/community/windows/builtin/system/application_popup/win_system_application_sysmon_crash.yml +0 -26
  2132. package/bundled-rules/sigma-rules/community/windows/builtin/system/lsasrv/win_system_lsasrv_ntlmv1.yml +0 -26
  2133. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_Iphlpsvc/win_system_isatap_router_address_set.yml +0 -43
  2134. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_certification_authority/win_system_adcs_enrollment_request_denied.yml +0 -26
  2135. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_dhcp_server/win_system_susp_dhcp_config.yml +0 -27
  2136. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_dhcp_server/win_system_susp_dhcp_config_failed.yml +0 -30
  2137. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_distributed_com/win_system_lpe_indicators_tabtip.yml +0 -28
  2138. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_eventlog/win_system_eventlog_cleared.yml +0 -42
  2139. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_eventlog/win_system_susp_eventlog_cleared.yml +0 -36
  2140. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_kerberos_key_distribution_center/win_system_kdcsvc_cert_use_no_strong_mapping.yml +0 -30
  2141. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_kerberos_key_distribution_center/win_system_kdcsvc_tgs_no_suitable_encryption_key_found.yml +0 -30
  2142. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_kernel_general/win_system_susp_critical_hive_location_access_bits_cleared.yml +0 -32
  2143. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_ntfs/win_system_volume_shadow_copy_mount.yml +0 -24
  2144. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_wer_systemerrorreporting/win_system_crash_dump_created.yml +0 -26
  2145. package/bundled-rules/sigma-rules/community/windows/builtin/system/microsoft_windows_windows_update_client/win_system_susp_system_update_error.yml +0 -30
  2146. package/bundled-rules/sigma-rules/community/windows/builtin/system/netlogon/win_system_possible_zerologon_exploitation_using_wellknown_tools.yml +0 -26
  2147. package/bundled-rules/sigma-rules/community/windows/builtin/system/netlogon/win_system_vul_cve_2020_1472.yml +0 -24
  2148. package/bundled-rules/sigma-rules/community/windows/builtin/system/ntfs/win_system_ntfs_vuln_exploit.yml +0 -29
  2149. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_cobaltstrike_service_installs.yml +0 -43
  2150. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_defender_disabled.yml +0 -35
  2151. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_hack_smbexec.yml +0 -33
  2152. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_invoke_obfuscation_clip_services.yml +0 -29
  2153. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_invoke_obfuscation_obfuscated_iex_services.yml +0 -30
  2154. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_invoke_obfuscation_stdin_services.yml +0 -39
  2155. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_invoke_obfuscation_var_services.yml +0 -35
  2156. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_invoke_obfuscation_via_compress_services.yml +0 -32
  2157. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_invoke_obfuscation_via_rundll_services.yml +0 -30
  2158. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_invoke_obfuscation_via_stdin_services.yml +0 -33
  2159. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_invoke_obfuscation_via_use_clip_services.yml +0 -26
  2160. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_invoke_obfuscation_via_use_mshta_services.yml +0 -28
  2161. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_invoke_obfuscation_via_use_rundll32_services.yml +0 -35
  2162. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_invoke_obfuscation_via_var_services.yml +0 -40
  2163. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_krbrelayup_service_installation.yml +0 -24
  2164. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_mal_creddumper.yml +0 -38
  2165. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_meterpreter_or_cobaltstrike_getsystem_service_installation.yml +0 -45
  2166. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_moriya_rootkit.yml +0 -25
  2167. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_powershell_script_installed_as_service.yml +0 -26
  2168. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_anydesk.yml +0 -28
  2169. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_csexecsvc.yml +0 -26
  2170. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_hacktools.yml +0 -38
  2171. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_mesh_agent.yml +0 -25
  2172. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_netsupport_manager.yml +0 -32
  2173. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_paexec.yml +0 -25
  2174. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_pdqdeploy.yml +0 -30
  2175. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_pdqdeploy_runner.yml +0 -28
  2176. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_pua_proceshacker.yml +0 -28
  2177. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_remcom.yml +0 -25
  2178. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_remote_access_software.yml +0 -54
  2179. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_remote_utilities.yml +0 -34
  2180. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_sliver.yml +0 -32
  2181. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_sups_unusal_client.yml +0 -28
  2182. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_susp.yml +0 -40
  2183. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_sysinternals_psexec.yml +0 -28
  2184. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_tacticalrmm.yml +0 -25
  2185. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_tap_driver.yml +0 -24
  2186. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_install_uncommon.yml +0 -51
  2187. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_terminated_error_generic.yml +0 -24
  2188. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_terminated_error_important.yml +0 -43
  2189. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_service_terminated_unexpectedly.yml +0 -28
  2190. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_susp_rtcore64_service_install.yml +0 -22
  2191. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_susp_service_installation_folder.yml +0 -32
  2192. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_susp_service_installation_folder_pattern.yml +0 -28
  2193. package/bundled-rules/sigma-rules/community/windows/builtin/system/service_control_manager/win_system_susp_service_installation_script.yml +0 -39
  2194. package/bundled-rules/sigma-rules/community/windows/builtin/taskscheduler/win_taskscheduler_execution_from_susp_locations.yml +0 -36
  2195. package/bundled-rules/sigma-rules/community/windows/builtin/taskscheduler/win_taskscheduler_lolbin_execution_via_task_scheduler.yml +0 -38
  2196. package/bundled-rules/sigma-rules/community/windows/builtin/taskscheduler/win_taskscheduler_susp_schtasks_delete.yml +0 -41
  2197. package/bundled-rules/sigma-rules/community/windows/builtin/terminalservices/win_terminalservices_rdp_ngrok.yml +0 -23
  2198. package/bundled-rules/sigma-rules/community/windows/builtin/win_alert_mimikatz_keywords.yml +0 -51
  2199. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_antimalware_platform_expired.yml +0 -28
  2200. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_asr_lsass_access.yml +0 -46
  2201. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_asr_psexec_wmi.yml +0 -29
  2202. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_config_change_exclusion_added.yml +0 -23
  2203. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_config_change_exploit_guard_tamper.yml +0 -36
  2204. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_config_change_sample_submission_consent.yml +0 -30
  2205. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_history_delete.yml +0 -22
  2206. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_malware_and_pua_scan_disabled.yml +0 -27
  2207. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_malware_detected_amsi_source.yml +0 -23
  2208. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_real_time_protection_disabled.yml +0 -29
  2209. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_real_time_protection_errors.yml +0 -31
  2210. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_restored_quarantine_file.yml +0 -21
  2211. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_suspicious_features_tampering.yml +0 -40
  2212. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_tamper_protection_trigger.yml +0 -32
  2213. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_threat.yml +0 -25
  2214. package/bundled-rules/sigma-rules/community/windows/builtin/windefend/win_defender_virus_scan_disabled.yml +0 -27
  2215. package/bundled-rules/sigma-rules/community/windows/builtin/wmi/win_wmi_persistence.yml +0 -37
  2216. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_hktl_cactustorch.yml +0 -35
  2217. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_hktl_cobaltstrike.yml +0 -27
  2218. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_keepass.yml +0 -24
  2219. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_loadlibrary.yml +0 -25
  2220. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_mstsc_susp_location.yml +0 -30
  2221. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_powershell_generic.yml +0 -30
  2222. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_powershell_lsass.yml +0 -30
  2223. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_powershell_susp_targets.yml +0 -33
  2224. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_susp_password_dumper_lsass.yml +0 -26
  2225. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_susp_relevant_source_image.yml +0 -98
  2226. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_susp_target_shell_application.yml +0 -38
  2227. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_susp_uncommon_source_image.yml +0 -118
  2228. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_susp_uncommon_target_image.yml +0 -59
  2229. package/bundled-rules/sigma-rules/community/windows/create_remote_thread/create_remote_thread_win_ttdinjec.yml +0 -22
  2230. package/bundled-rules/sigma-rules/community/windows/create_stream_hash/create_stream_hash_ads_executable.yml +0 -26
  2231. package/bundled-rules/sigma-rules/community/windows/create_stream_hash/create_stream_hash_creation_internet_file.yml +0 -87
  2232. package/bundled-rules/sigma-rules/community/windows/create_stream_hash/create_stream_hash_file_sharing_domains_download_susp_extension.yml +0 -72
  2233. package/bundled-rules/sigma-rules/community/windows/create_stream_hash/create_stream_hash_file_sharing_domains_download_unusual_extension.yml +0 -65
  2234. package/bundled-rules/sigma-rules/community/windows/create_stream_hash/create_stream_hash_hktl_generic_download.yml +0 -136
  2235. package/bundled-rules/sigma-rules/community/windows/create_stream_hash/create_stream_hash_regedit_export_to_ads.yml +0 -23
  2236. package/bundled-rules/sigma-rules/community/windows/create_stream_hash/create_stream_hash_susp_ip_domains.yml +0 -35
  2237. package/bundled-rules/sigma-rules/community/windows/create_stream_hash/create_stream_hash_winget_susp_package_source.yml +0 -34
  2238. package/bundled-rules/sigma-rules/community/windows/create_stream_hash/create_stream_hash_zip_tld_download.yml +0 -42
  2239. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_anonymfiles_com.yml +0 -25
  2240. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_appinstaller.yml +0 -28
  2241. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_cloudflared_communication.yml +0 -32
  2242. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_common_malware_hosting_services.yml +0 -31
  2243. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_devtunnels_communication.yml +0 -33
  2244. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_dns_server_discovery_via_ldap_query.yml +0 -44
  2245. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_domain_azurewebsites.yml +0 -112
  2246. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_finger.yml +0 -32
  2247. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_gup_query_to_uncommon_domains.yml +0 -41
  2248. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_hybridconnectionmgr_servicebus.yml +0 -23
  2249. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_kerberos_coercion_via_dns_object_spoofing.yml +0 -38
  2250. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_mal_cobaltstrike.yml +0 -30
  2251. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_mega_nz.yml +0 -25
  2252. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_onelaunch_update_service.yml +0 -27
  2253. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_quickassist.yml +0 -29
  2254. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_regsvr32_dns_query.yml +0 -28
  2255. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_remote_access_software_domains_non_browsers.yml +0 -175
  2256. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_susp_external_ip_lookup.yml +0 -107
  2257. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_teamviewer_domain_query_by_uncommon_app.yml +0 -28
  2258. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_tor_onion_domain_query.yml +0 -64
  2259. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_ufile_io_query.yml +0 -25
  2260. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_vscode_tunnel_communication.yml +0 -32
  2261. package/bundled-rules/sigma-rules/community/windows/dns_query/dns_query_win_wscript_cscript_resolution.yml +0 -42
  2262. package/bundled-rules/sigma-rules/community/windows/driver_load/driver_load_win_mal_drivers.yml +0 -813
  2263. package/bundled-rules/sigma-rules/community/windows/driver_load/driver_load_win_mal_drivers_names.yml +0 -93
  2264. package/bundled-rules/sigma-rules/community/windows/driver_load/driver_load_win_pua_process_hacker.yml +0 -32
  2265. package/bundled-rules/sigma-rules/community/windows/driver_load/driver_load_win_pua_system_informer.yml +0 -41
  2266. package/bundled-rules/sigma-rules/community/windows/driver_load/driver_load_win_susp_temp_use.yml +0 -23
  2267. package/bundled-rules/sigma-rules/community/windows/driver_load/driver_load_win_vuln_drivers.yml +0 -4456
  2268. package/bundled-rules/sigma-rules/community/windows/driver_load/driver_load_win_vuln_drivers_names.yml +0 -298
  2269. package/bundled-rules/sigma-rules/community/windows/driver_load/driver_load_win_vuln_hevd_driver.yml +0 -26
  2270. package/bundled-rules/sigma-rules/community/windows/driver_load/driver_load_win_vuln_winring0_driver.yml +0 -30
  2271. package/bundled-rules/sigma-rules/community/windows/driver_load/driver_load_win_windivert.yml +0 -51
  2272. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_browsers_chromium_sensitive_files.yml +0 -46
  2273. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_browsers_credential.yml +0 -63
  2274. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_office_outlook_mail_credential.yml +0 -52
  2275. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_susp_credential_manager_access.yml +0 -37
  2276. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_susp_credhist.yml +0 -35
  2277. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_susp_crypto_currency_wallets.yml +0 -53
  2278. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_susp_dpapi_master_key_access.yml +0 -35
  2279. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_susp_gpo_access_uncommon_process.yml +0 -33
  2280. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_susp_gpo_files.yml +0 -47
  2281. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_susp_process_access_browser_cred_files.yml +0 -202
  2282. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_susp_reg_and_hive.yml +0 -33
  2283. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_susp_unattend_xml.yml +0 -25
  2284. package/bundled-rules/sigma-rules/community/windows/file/file_access/file_access_win_teams_sensitive_files.yml +0 -29
  2285. package/bundled-rules/sigma-rules/community/windows/file/file_change/file_change_win_date_changed_to_another_year.yml +0 -60
  2286. package/bundled-rules/sigma-rules/community/windows/file/file_change/file_change_win_unusual_modification_by_dns_exe.yml +0 -27
  2287. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_delete_backup_file.yml +0 -37
  2288. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_delete_event_log_files.yml +0 -22
  2289. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_delete_exchange_powershell_logs.yml +0 -23
  2290. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_delete_iis_access_logs.yml +0 -27
  2291. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_delete_own_image.yml +0 -21
  2292. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_delete_powershell_command_history.yml +0 -21
  2293. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_delete_prefetch.yml +0 -29
  2294. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_delete_teamviewer_logs.yml +0 -25
  2295. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_delete_tomcat_logs.yml +0 -29
  2296. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_sysinternals_sdelete_file_deletion.yml +0 -27
  2297. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_unusual_deletion_by_dns_exe.yml +0 -28
  2298. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_zone_identifier_ads.yml +0 -25
  2299. package/bundled-rules/sigma-rules/community/windows/file/file_delete/file_delete_win_zone_identifier_ads_uncommon.yml +0 -47
  2300. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_adsi_cache_creation_by_uncommon_tool.yml +0 -50
  2301. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_advanced_ip_scanner.yml +0 -30
  2302. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_anydesk_artefact.yml +0 -28
  2303. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_anydesk_writing_susp_binaries.yml +0 -33
  2304. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_arcsoc_susp_file_created.yml +0 -45
  2305. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_aspnet_temp_files.yml +0 -32
  2306. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_bloodhound_collection.yml +0 -40
  2307. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_comodo_itsm_potentially_suspicious_file_creation.yml +0 -46
  2308. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_create_evtx_non_common_locations.yml +0 -33
  2309. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_create_non_existent_dlls.yml +0 -55
  2310. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_creation_deno.yml +0 -31
  2311. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_creation_new_shim_database.yml +0 -31
  2312. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_creation_scr_binary_file.yml +0 -33
  2313. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_creation_system_dll_files.yml +0 -39
  2314. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_creation_system_file.yml +0 -145
  2315. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_creation_unquoted_service_path.yml +0 -25
  2316. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_cred_dump_tools_dropped_files.yml +0 -55
  2317. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_cscript_wscript_dropper.yml +0 -37
  2318. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_csexec_service.yml +0 -22
  2319. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_csharp_compile_artefact.yml +0 -25
  2320. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_dcom_iertutil_dll_hijack.yml +0 -29
  2321. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_desktop_ini_created_by_uncommon_process.yml +0 -38
  2322. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_dll_sideloading_space_path.yml +0 -30
  2323. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_dump_file_creation.yml +0 -24
  2324. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_dump_file_susp_creation.yml +0 -34
  2325. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_errorhandler_persistence.yml +0 -24
  2326. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_exchange_webshell_drop.yml +0 -35
  2327. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_exchange_webshell_drop_suspicious.yml +0 -39
  2328. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_gotoopener_artefact.yml +0 -24
  2329. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_gup_uncommon_file_creation.yml +0 -49
  2330. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_hktl_crackmapexec_indicators.yml +0 -32
  2331. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_hktl_dumpert.yml +0 -26
  2332. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_hktl_hivenightmare_file_exports.yml +0 -33
  2333. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_hktl_inveigh_artefacts.yml +0 -35
  2334. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_hktl_krbrelay_remote_ioc.yml +0 -24
  2335. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_hktl_mimikatz_files.yml +0 -28
  2336. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_hktl_nppspy.yml +0 -24
  2337. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_hktl_powerup_dllhijacking.yml +0 -30
  2338. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_hktl_quarkspw_filedump.yml +0 -24
  2339. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_hktl_remote_cred_dump.yml +0 -25
  2340. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_hktl_safetykatz.yml +0 -23
  2341. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_impacket_file_indicators.yml +0 -25
  2342. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_initial_access_dll_search_order_hijacking.yml +0 -61
  2343. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_install_teamviewer_desktop.yml +0 -21
  2344. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_iphlpapi_dll_sideloading.yml +0 -27
  2345. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_iso_file_mount.yml +0 -29
  2346. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_iso_file_recent.yml +0 -31
  2347. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_lolbin_gather_network_info_script_output.yml +0 -31
  2348. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_lsass_default_dump_file_names.yml +0 -59
  2349. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_lsass_shtinkering.yml +0 -24
  2350. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_lsass_werfault_dump.yml +0 -24
  2351. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_mal_adwind.yml +0 -30
  2352. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_mal_octopus_scanner.yml +0 -25
  2353. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_msdt_susp_directories.yml +0 -31
  2354. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_mysqld_uncommon_file_creation.yml +0 -34
  2355. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_net_cli_artefact.yml +0 -48
  2356. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_new_files_in_uncommon_appdata_folder.yml +0 -45
  2357. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_new_scr_file.yml +0 -29
  2358. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_notepad_plus_plus_persistence.yml +0 -40
  2359. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_ntds_dit_creation.yml +0 -21
  2360. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_ntds_dit_uncommon_parent_process.yml +0 -49
  2361. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_ntds_dit_uncommon_process.yml +0 -46
  2362. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_ntds_exfil_tools.yml +0 -26
  2363. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_addin_persistence.yml +0 -37
  2364. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_macro_files_created.yml +0 -31
  2365. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_macro_files_downloaded.yml +0 -62
  2366. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_macro_files_from_susp_process.yml +0 -44
  2367. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_onenote_files_in_susp_locations.yml +0 -33
  2368. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_onenote_susp_dropped_files.yml +0 -47
  2369. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_outlook_macro_creation.yml +0 -30
  2370. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_outlook_newform.yml +0 -28
  2371. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_outlook_susp_file_creation_in_temp_dir.yml +0 -43
  2372. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_outlook_susp_macro_creation.yml +0 -32
  2373. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_publisher_files_in_susp_locations.yml +0 -25
  2374. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_startup_persistence.yml +0 -53
  2375. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_susp_file_extension.yml +0 -69
  2376. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_office_uncommon_file_startup.yml +0 -65
  2377. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_pcre_net_temp_file.yml +0 -23
  2378. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_perflogs_susp_files.yml +0 -39
  2379. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_pfx_file_creation.yml +0 -49
  2380. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_powershell_drop_binary_or_script.yml +0 -61
  2381. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_powershell_drop_powershell.yml +0 -30
  2382. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_powershell_exploit_scripts.yml +0 -282
  2383. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_powershell_module_creation.yml +0 -26
  2384. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_powershell_module_susp_creation.yml +0 -24
  2385. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_powershell_module_uncommon_creation.yml +0 -38
  2386. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_powershell_startup_shortcuts.yml +0 -32
  2387. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_ps_script_policy_test_creation_by_uncommon_process.yml +0 -41
  2388. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_python_path_configuration_files.yml +0 -38
  2389. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_rclone_config_files.yml +0 -24
  2390. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_rdp_file_susp_creation.yml +0 -50
  2391. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_redmimicry_winnti_filedrop.yml +0 -25
  2392. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_regedit_print_as_pdf.yml +0 -23
  2393. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_remcom_service.yml +0 -22
  2394. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_remote_access_tools_screenconnect_artefact.yml +0 -24
  2395. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_remote_access_tools_screenconnect_remote_file.yml +0 -28
  2396. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_ripzip_attack.yml +0 -29
  2397. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_sam_dump.yml +0 -46
  2398. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_scheduled_task_creation.yml +0 -30
  2399. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_sed_file_creation.yml +0 -36
  2400. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_shell_write_susp_directory.yml +0 -46
  2401. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_shell_write_susp_files_extensions.yml +0 -83
  2402. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_startup_folder_file_write.yml +0 -37
  2403. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_binary_dropper.yml +0 -123
  2404. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_colorcpl.yml +0 -28
  2405. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_creation_by_mobsync.yml +0 -29
  2406. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_default_gpo_dir_write.yml +0 -24
  2407. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_desktop_txt.yml +0 -25
  2408. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_desktopimgdownldr_file.yml +0 -31
  2409. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_diagcab.yml +0 -20
  2410. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_double_extension.yml +0 -65
  2411. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_dpapi_backup_and_cert_export_ioc.yml +0 -32
  2412. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_exchange_aspx_write.yml +0 -26
  2413. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_executable_creation.yml +0 -32
  2414. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_file_write_in_webapps_root.yml +0 -37
  2415. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_filewrite_in_sharepoint_layouts_dir.yml +0 -55
  2416. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_get_variable.yml +0 -28
  2417. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_hidden_dir_index_allocation.yml +0 -30
  2418. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_homoglyph_filename.yml +0 -77
  2419. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_legitimate_app_dropping_archive.yml +0 -52
  2420. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_legitimate_app_dropping_exe.yml +0 -44
  2421. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_legitimate_app_dropping_in_uncommon_location.yml +0 -71
  2422. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_legitimate_app_dropping_script.yml +0 -47
  2423. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_lnk_double_extension.yml +0 -58
  2424. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_powershell_profile.yml +0 -30
  2425. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_procexplorer_driver_created_in_tmp_folder.yml +0 -31
  2426. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_public_folder_extension.yml +0 -33
  2427. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_recycle_bin_fake_exec.yml +0 -34
  2428. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_right_to_left_override_extension_spoofing.yml +0 -53
  2429. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_spool_drivers_color_drop.yml +0 -24
  2430. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_startup_folder_persistence.yml +0 -52
  2431. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_system_interactive_powershell.yml +0 -25
  2432. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_task_write.yml +0 -28
  2433. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_teamviewer_remote_session.yml +0 -27
  2434. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_vscode_powershell_profile.yml +0 -26
  2435. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_wdac_policy_creation.yml +0 -55
  2436. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_windows_terminal_profile.yml +0 -31
  2437. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_susp_winsxs_binary_creation.yml +0 -29
  2438. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_sysinternals_adexplorer_dump_written.yml +0 -35
  2439. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_sysinternals_livekd_default_dump_name.yml +0 -21
  2440. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_sysinternals_livekd_driver.yml +0 -24
  2441. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_sysinternals_livekd_driver_susp_creation.yml +0 -28
  2442. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_sysinternals_procexp_driver_susp_creation.yml +0 -32
  2443. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_sysinternals_procmon_driver_susp_creation.yml +0 -27
  2444. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_sysinternals_psexec_service.yml +0 -27
  2445. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_sysinternals_psexec_service_key.yml +0 -30
  2446. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_system32_local_folder_privilege_escalation.yml +0 -30
  2447. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_taskmgr_lsass_dump.yml +0 -28
  2448. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_tsclient_filewrite_startup.yml +0 -23
  2449. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_uac_bypass_consent_comctl32.yml +0 -24
  2450. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_uac_bypass_dotnet_profiler.yml +0 -24
  2451. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_uac_bypass_eventvwr.yml +0 -31
  2452. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_uac_bypass_idiagnostic_profile.yml +0 -25
  2453. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_uac_bypass_ieinstal.yml +0 -26
  2454. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_uac_bypass_msconfig_gui.yml +0 -24
  2455. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_uac_bypass_ntfs_reparse_point.yml +0 -24
  2456. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_uac_bypass_winsat.yml +0 -26
  2457. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_uac_bypass_wmp.yml +0 -27
  2458. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_vhd_download_via_browsers.yml +0 -41
  2459. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_vscode_tunnel_indicators.yml +0 -23
  2460. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_vscode_tunnel_remote_creation_artefacts.yml +0 -23
  2461. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_vscode_tunnel_renamed_execution.yml +0 -27
  2462. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_wdac_policy_creation_in_codeintegrity_folder.yml +0 -29
  2463. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_webdav_tmpfile_creation.yml +0 -41
  2464. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_webshell_creation_detect.yml +0 -51
  2465. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_werfault_dll_hijacking.yml +0 -33
  2466. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_winrar_file_creation_in_startup_folder.yml +0 -29
  2467. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_winrm_awl_bypass.yml +0 -31
  2468. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_wmi_persistence_script_event_consumer_write.yml +0 -23
  2469. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_wmiexec_default_filename.yml +0 -26
  2470. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_wmiprvse_wbemcomn_dll_hijack.yml +0 -25
  2471. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_wpbbin_persistence.yml +0 -23
  2472. package/bundled-rules/sigma-rules/community/windows/file/file_event/file_event_win_writing_local_admin_share.yml +0 -28
  2473. package/bundled-rules/sigma-rules/community/windows/file/file_executable_detected/file_executable_detected_win_susp_embeded_sed_file.yml +0 -30
  2474. package/bundled-rules/sigma-rules/community/windows/file/file_rename/file_rename_win_non_dll_to_dll_ext.yml +0 -47
  2475. package/bundled-rules/sigma-rules/community/windows/file/file_rename/file_rename_win_ransomware.yml +0 -59
  2476. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_clfs_load.yml +0 -41
  2477. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_cmstp_load_dll_from_susp_location.yml +0 -32
  2478. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_amsi_suspicious_process.yml +0 -28
  2479. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_amsi_uncommon_process.yml +0 -51
  2480. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_azure_microsoft_account_token_provider_dll_load.yml +0 -58
  2481. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_bitsproxy_load_by_uncommon_process.yml +0 -41
  2482. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_comsvcs_load_renamed_version_by_rundll32.yml +0 -32
  2483. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_credui_uncommon_process_load.yml +0 -56
  2484. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_dbghelp_dbgcore_susp_load.yml +0 -74
  2485. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_dbghelp_dbgcore_unsigned_load.yml +0 -33
  2486. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_pcre_dotnet_dll_load.yml +0 -23
  2487. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_rstrtmgr_suspicious_load.yml +0 -49
  2488. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_rstrtmgr_uncommon_load.yml +0 -60
  2489. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_sdiageng_load_by_msdt.yml +0 -24
  2490. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_system_drawing_load.yml +0 -24
  2491. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_system_management_automation_susp_load.yml +0 -94
  2492. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_taskschd_by_process_in_potentially_suspicious_location.yml +0 -37
  2493. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_tttracer_module_load.yml +0 -29
  2494. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_unsigned_node_load.yml +0 -41
  2495. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_vss_ps_susp_load.yml +0 -64
  2496. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_vssapi_susp_load.yml +0 -56
  2497. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_dll_vsstrace_susp_load.yml +0 -51
  2498. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_hktl_sharpevtmute.yml +0 -25
  2499. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_hktl_silenttrinity_stager.yml +0 -25
  2500. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_iexplore_dcom_iertutil_dll_hijack.yml +0 -29
  2501. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_lsass_unsigned_image_load.yml +0 -23
  2502. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_office_dotnet_assembly_dll_load.yml +0 -30
  2503. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_office_dotnet_clr_dll_load.yml +0 -30
  2504. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_office_dotnet_gac_dll_load.yml +0 -30
  2505. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_office_excel_xll_load.yml +0 -23
  2506. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_office_excel_xll_susp_load.yml +0 -34
  2507. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_office_outlook_outlvba_load.yml +0 -23
  2508. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_office_powershell_dll_load.yml +0 -30
  2509. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_office_vbadll_load.yml +0 -33
  2510. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_office_word_wll_load.yml +0 -25
  2511. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_rundll32_remote_share_load.yml +0 -23
  2512. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_scrcons_wmi_scripteventconsumer.yml +0 -32
  2513. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_7za.yml +0 -30
  2514. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_abused_dlls_susp_paths.yml +0 -47
  2515. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_antivirus.yml +0 -101
  2516. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_appverifui.yml +0 -31
  2517. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_aruba_networks_virtual_intranet_access.yml +0 -45
  2518. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_avkkid.yml +0 -31
  2519. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_ccleaner_du.yml +0 -30
  2520. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_ccleaner_reactivator.yml +0 -28
  2521. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_chrome_frame_helper.yml +0 -30
  2522. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_classicexplorer32.yml +0 -26
  2523. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_comctl32.yml +0 -31
  2524. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_coregen.yml +0 -29
  2525. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_cpl_from_non_system_location.yml +0 -38
  2526. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_dbgcore.yml +0 -39
  2527. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_dbghelp.yml +0 -44
  2528. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_dbgmodel.yml +0 -35
  2529. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_eacore.yml +0 -28
  2530. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_edputil.yml +0 -28
  2531. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_from_non_system_location.yml +0 -511
  2532. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_goopdate.yml +0 -45
  2533. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_gup_libcurl.yml +0 -26
  2534. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_iviewers.yml +0 -27
  2535. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_jli.yml +0 -41
  2536. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_jsschhlp.yml +0 -26
  2537. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_keyscrambler.yml +0 -45
  2538. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_libvlc.yml +0 -28
  2539. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_mfdetours.yml +0 -25
  2540. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_mfdetours_unsigned.yml +0 -29
  2541. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_mpsvc.yml +0 -28
  2542. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_mscorsvc.yml +0 -31
  2543. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_non_existent_dlls.yml +0 -59
  2544. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_office_dlls.yml +0 -30
  2545. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_python.yml +0 -52
  2546. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_rcdll.yml +0 -28
  2547. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_rjvplatform_default_location.yml +0 -24
  2548. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_rjvplatform_non_default_location.yml +0 -26
  2549. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_robform.yml +0 -34
  2550. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_shell_chrome_api.yml +0 -30
  2551. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_shelldispatch.yml +0 -28
  2552. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_smadhook.yml +0 -35
  2553. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_solidpdfcreator.yml +0 -28
  2554. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_third_party.yml +0 -42
  2555. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_ualapi.yml +0 -27
  2556. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_vivaldi_elf.yml +0 -26
  2557. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_vmguestlib.yml +0 -28
  2558. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_vmmap_dbghelp_signed.yml +0 -30
  2559. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_vmmap_dbghelp_unsigned.yml +0 -32
  2560. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_vmware_xfer.yml +0 -27
  2561. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_waveedit.yml +0 -30
  2562. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_wazuh.yml +0 -37
  2563. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_windows_defender.yml +0 -37
  2564. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_side_load_wwlib.yml +0 -33
  2565. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_susp_baaupdate_dll_load.yml +0 -46
  2566. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_susp_clickonce_unsigned_module_loaded.yml +0 -26
  2567. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_susp_dll_load_system_process.yml +0 -26
  2568. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_susp_python_image_load.yml +0 -36
  2569. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_susp_script_dotnet_clr_dll_load.yml +0 -39
  2570. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_susp_unsigned_dll.yml +0 -77
  2571. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_thor_unsigned_execution.yml +0 -32
  2572. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_uac_bypass_iscsicpl.yml +0 -29
  2573. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_uac_bypass_via_dism.yml +0 -28
  2574. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_win_mmc_loads_script_engine_dll.yml +0 -30
  2575. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_win_susp_dbgcore_dbghelp_load.yml +0 -52
  2576. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_win_trusted_path_bypass.yml +0 -31
  2577. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_win_werfaultsecure_dbgcore_dbghelp_load.yml +0 -35
  2578. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_wmi_module_load_by_uncommon_process.yml +0 -61
  2579. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_wmi_persistence_commandline_event_consumer.yml +0 -24
  2580. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_wmic_remote_xsl_scripting_dlls.yml +0 -37
  2581. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_wmiprvse_wbemcomn_dll_hijack.yml +0 -25
  2582. package/bundled-rules/sigma-rules/community/windows/image_load/image_load_wsman_provider_image_load.yml +0 -76
  2583. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_addinutil_initiated.yml +0 -25
  2584. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_adws_unusual_connection.yml +0 -34
  2585. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_certutil_initiated_connection.yml +0 -30
  2586. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_cmstp_initiated_connection.yml +0 -36
  2587. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_dfsvc_non_local_ip.yml +0 -34
  2588. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_dfsvc_uncommon_ports.yml +0 -33
  2589. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_dialer_initiated_connection.yml +0 -39
  2590. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_dllhost_non_local_ip.yml +0 -51
  2591. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_azurewebsites.yml +0 -147
  2592. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_btunnels.yml +0 -26
  2593. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_cloudflared_communication.yml +0 -35
  2594. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_crypto_mining_pools.yml +0 -251
  2595. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_dead_drop_resolvers.yml +0 -246
  2596. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_devtunnels.yml +0 -34
  2597. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_dropbox_api.yml +0 -30
  2598. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_external_ip_lookup.yml +0 -111
  2599. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_google_api_non_browser_access.yml +0 -82
  2600. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_localtonet_tunnel.yml +0 -30
  2601. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_mega_nz.yml +0 -28
  2602. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_ngrok.yml +0 -41
  2603. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_ngrok_tunnel.yml +0 -42
  2604. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_notion_api_susp_communication.yml +0 -63
  2605. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_portmap.yml +0 -26
  2606. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_telegram_api_non_browser_access.yml +0 -65
  2607. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_domain_vscode_tunnel_connection.yml +0 -34
  2608. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_eqnedt.yml +0 -24
  2609. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_finger.yml +0 -33
  2610. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_hh_http_connection.yml +0 -31
  2611. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_imewdbld.yml +0 -29
  2612. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_msiexec_http.yml +0 -31
  2613. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_notepad.yml +0 -31
  2614. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_office_outbound_non_local_ip.yml +0 -317
  2615. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_office_uncommon_ports.yml +0 -46
  2616. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_powershell_network_connection.yml +0 -48
  2617. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_python.yml +0 -47
  2618. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_rdp_outbound_over_non_standard_tools.yml +0 -80
  2619. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_rdp_reverse_tunnel.yml +0 -31
  2620. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_rdp_to_http.yml +0 -31
  2621. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_regasm_network_activity.yml +0 -34
  2622. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_regsvr32_network_activity.yml +0 -26
  2623. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_remote_access_tools_anydesk_incoming_connection.yml +0 -28
  2624. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_rundll32_net_connections.yml +0 -48
  2625. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_silenttrinity_stager_msbuild_activity.yml +0 -28
  2626. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_azurefd_connection.yml +0 -49
  2627. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_binary_no_cmdline.yml +0 -32
  2628. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_file_sharing_domains_susp_folders.yml +0 -78
  2629. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_initaited_public_folder.yml +0 -31
  2630. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_initiated_uncommon_or_suspicious_locations.yml +0 -77
  2631. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_malware_callback_port.yml +0 -94
  2632. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_malware_callback_ports_uncommon.yml +0 -43
  2633. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_outbound_kerberos_connection.yml +0 -42
  2634. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_outbound_mobsync_connection.yml +0 -35
  2635. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_outbound_smtp_connections.yml +0 -39
  2636. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_rdp_from_domain_controller.yml +0 -26
  2637. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_susp_remote_powershell_session.yml +0 -51
  2638. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_winlogon_net_connections.yml +0 -35
  2639. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_wordpad_uncommon_ports.yml +0 -35
  2640. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_wscript_cscript_local_connection.yml +0 -39
  2641. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_wscript_cscript_outbound_connection.yml +0 -40
  2642. package/bundled-rules/sigma-rules/community/windows/network_connection/net_connection_win_wuauclt_network_connection.yml +0 -58
  2643. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_adfs_namedpipe_connection_uncommon_tool.yml +0 -41
  2644. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_hktl_cobaltstrike.yml +0 -55
  2645. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_hktl_cobaltstrike_re.yml +0 -48
  2646. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_hktl_cobaltstrike_susp_pipe_patterns.yml +0 -74
  2647. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_hktl_coercedpotato.yml +0 -24
  2648. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_hktl_diagtrack_eop.yml +0 -22
  2649. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_hktl_efspotato.yml +0 -31
  2650. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_hktl_generic_cred_dump_tools_pipes.yml +0 -30
  2651. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_hktl_koh_default_pipe.yml +0 -28
  2652. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_powershell_alternate_host_pipe.yml +0 -63
  2653. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_powershell_execution_pipe.yml +0 -27
  2654. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_pua_csexec_default_pipe.yml +0 -29
  2655. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_pua_paexec_default_pipe.yml +0 -23
  2656. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_pua_remcom_default_pipe.yml +0 -29
  2657. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_scrcons_wmi_consumer_namedpipe.yml +0 -23
  2658. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_susp_malicious_namedpipes.yml +0 -63
  2659. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_sysinternals_psexec_default_pipe.yml +0 -29
  2660. package/bundled-rules/sigma-rules/community/windows/pipe_created/pipe_created_sysinternals_psexec_default_pipe_susp_location.yml +0 -34
  2661. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_abuse_nslookup_with_dns_records.yml +0 -32
  2662. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_alternate_powershell_hosts.yml +0 -42
  2663. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_bxor_operator_usage.yml +0 -29
  2664. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_delete_volume_shadow_copies.yml +0 -28
  2665. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_downgrade_attack.yml +0 -25
  2666. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_exe_calling_ps.yml +0 -28
  2667. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_powercat.yml +0 -29
  2668. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_remote_powershell_session.yml +0 -30
  2669. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_remotefxvgpudisablement_abuse.yml +0 -31
  2670. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_renamed_powershell.yml +0 -40
  2671. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_susp_download.yml +0 -29
  2672. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_susp_get_nettcpconnection.yml +0 -22
  2673. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_susp_zip_compress.yml +0 -35
  2674. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_tamper_windows_defender_set_mp.yml +0 -81
  2675. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_classic/posh_pc_wsman_com_provider_no_powershell.yml +0 -40
  2676. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_active_directory_module_dll_import.yml +0 -34
  2677. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_alternate_powershell_hosts.yml +0 -51
  2678. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_bad_opsec_artifacts.yml +0 -37
  2679. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_clear_powershell_history.yml +0 -41
  2680. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_decompress_commands.yml +0 -27
  2681. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_exploit_scripts.yml +0 -278
  2682. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_get_addbaccount.yml +0 -26
  2683. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_get_clipboard.yml +0 -24
  2684. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_hktl_evil_winrm_execution.yml +0 -40
  2685. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_invoke_obfuscation_clip.yml +0 -28
  2686. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_invoke_obfuscation_obfuscated_iex.yml +0 -34
  2687. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_invoke_obfuscation_stdin.yml +0 -28
  2688. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_invoke_obfuscation_var.yml +0 -28
  2689. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_invoke_obfuscation_via_compress.yml +0 -34
  2690. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_invoke_obfuscation_via_rundll.yml +0 -32
  2691. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_invoke_obfuscation_via_stdin.yml +0 -28
  2692. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_invoke_obfuscation_via_use_clip.yml +0 -28
  2693. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_invoke_obfuscation_via_use_mhsta.yml +0 -34
  2694. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_invoke_obfuscation_via_use_rundll32.yml +0 -37
  2695. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_invoke_obfuscation_via_var.yml +0 -28
  2696. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_malicious_commandlets.yml +0 -252
  2697. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_remote_powershell_session.yml +0 -29
  2698. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_remotefxvgpudisablement_abuse.yml +0 -31
  2699. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_susp_ad_group_reco.yml +0 -38
  2700. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_susp_download.yml +0 -31
  2701. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_susp_get_nettcpconnection.yml +0 -23
  2702. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_susp_invocation_generic.yml +0 -41
  2703. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_susp_invocation_specific.yml +0 -80
  2704. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_susp_local_group_reco.yml +0 -47
  2705. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_susp_netfirewallrule_recon.yml +0 -31
  2706. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_susp_reset_computermachinepassword.yml +0 -28
  2707. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_susp_smb_share_reco.yml +0 -27
  2708. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_susp_zip_compress.yml +0 -36
  2709. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_module/posh_pm_syncappvpublishingserver_exe.yml +0 -28
  2710. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_aadinternals_cmdlets_execution.yml +0 -58
  2711. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_access_to_browser_login_data.yml +0 -39
  2712. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_active_directory_module_dll_import.yml +0 -34
  2713. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_add_dnsclient_rule.yml +0 -29
  2714. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_add_windows_capability.yml +0 -28
  2715. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_adrecon_execution.yml +0 -29
  2716. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_amsi_bypass_pattern_nov22.yml +0 -27
  2717. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_amsi_null_bits_bypass.yml +0 -28
  2718. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_apt_silence_eda.yml +0 -46
  2719. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_as_rep_roasting.yml +0 -29
  2720. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_audio_exfiltration.yml +0 -36
  2721. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_automated_collection.yml +0 -37
  2722. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_capture_screenshots.yml +0 -25
  2723. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_clear_powershell_history.yml +0 -41
  2724. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_clearing_windows_console_history.yml +0 -34
  2725. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_cmdlet_scheduled_task.yml +0 -44
  2726. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_compress_archive_usage.yml +0 -27
  2727. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_computer_discovery_get_adcomputer.yml +0 -34
  2728. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_copy_item_system_directory.yml +0 -25
  2729. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_cor_profiler.yml +0 -32
  2730. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_create_local_user.yml +0 -25
  2731. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_create_volume_shadow_copy.yml +0 -26
  2732. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_detect_vm_env.yml +0 -33
  2733. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_directorysearcher.yml +0 -27
  2734. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_directoryservices_accountmanagement.yml +0 -25
  2735. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_disable_psreadline_command_history.yml +0 -24
  2736. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_disable_windows_optional_feature.yml +0 -36
  2737. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_dotnet_assembly_from_file.yml +0 -22
  2738. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_download_com_cradles.yml +0 -38
  2739. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_dsinternals_cmdlets.yml +0 -90
  2740. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_dump_password_windows_credential_manager.yml +0 -38
  2741. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_email_forwarding_activity.yml +0 -43
  2742. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_enable_psremoting.yml +0 -23
  2743. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_enable_susp_windows_optional_feature.yml +0 -41
  2744. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_enumerate_password_windows_credential_manager.yml +0 -31
  2745. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_etw_trace_evasion.yml +0 -32
  2746. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_exchange_mailbox_smpt_forwarding_rule.yml +0 -24
  2747. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_export_certificate.yml +0 -32
  2748. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_frombase64string_archive.yml +0 -28
  2749. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_get_acl_service.yml +0 -31
  2750. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_get_adcomputer.yml +0 -31
  2751. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_get_adgroup.yml +0 -25
  2752. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_get_adreplaccount.yml +0 -28
  2753. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_get_childitem_bookmarks.yml +0 -32
  2754. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_get_process_security_software_discovery.yml +0 -50
  2755. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_hktl_rubeus.yml +0 -46
  2756. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_hktl_winpwn.yml +0 -45
  2757. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_hotfix_enum.yml +0 -23
  2758. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_icmp_exfiltration.yml +0 -26
  2759. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_import_module_susp_dirs.yml +0 -41
  2760. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_inbox_rule_creation_or_update_activity.yml +0 -42
  2761. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_install_unsigned_appx_packages.yml +0 -32
  2762. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_command_remote.yml +0 -25
  2763. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_dnsexfiltration.yml +0 -29
  2764. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_obfuscation_clip.yml +0 -25
  2765. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_obfuscation_obfuscated_iex.yml +0 -30
  2766. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_obfuscation_stdin.yml +0 -25
  2767. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_obfuscation_var.yml +0 -25
  2768. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_obfuscation_via_compress.yml +0 -31
  2769. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_obfuscation_via_rundll.yml +0 -29
  2770. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_obfuscation_via_stdin.yml +0 -25
  2771. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_obfuscation_via_use_clip.yml +0 -25
  2772. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_obfuscation_via_use_mhsta.yml +0 -31
  2773. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_obfuscation_via_use_rundll32.yml +0 -34
  2774. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_invoke_obfuscation_via_var.yml +0 -25
  2775. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_keylogging.yml +0 -29
  2776. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_localuser.yml +0 -33
  2777. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_mailbox_access.yml +0 -23
  2778. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_mailboxexport_share.yml +0 -30
  2779. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_malicious_commandlets.yml +0 -260
  2780. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_malicious_keywords.yml +0 -43
  2781. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_memorydump_getstoragediagnosticinfo.yml +0 -25
  2782. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_modify_group_policy_settings.yml +0 -34
  2783. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_msxml_com.yml +0 -32
  2784. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_new_netfirewallrule_allow.yml +0 -29
  2785. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_new_smbmapping_quic.yml +0 -30
  2786. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_nishang_malicious_commandlets.yml +0 -106
  2787. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_ntfs_ads_access.yml +0 -30
  2788. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_office_comobject_registerxll.yml +0 -28
  2789. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_packet_capture.yml +0 -28
  2790. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_potential_invoke_mimikatz.yml +0 -29
  2791. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_potential_unconstrained_delegation_discovery.yml +0 -32
  2792. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_powershell_web_access_installation.yml +0 -32
  2793. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_powerview_malicious_commandlets.yml +0 -133
  2794. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_prompt_credentials.yml +0 -25
  2795. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_psasyncshell.yml +0 -22
  2796. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_psattack.yml +0 -23
  2797. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_registry_reconnaissance.yml +0 -28
  2798. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_remote_session_creation.yml +0 -28
  2799. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_remotefxvgpudisablement_abuse.yml +0 -30
  2800. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_remove_item_path.yml +0 -32
  2801. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_request_kerberos_ticket.yml +0 -31
  2802. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_resolve_list_of_ip_from_file.yml +0 -27
  2803. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_root_certificate_installed.yml +0 -29
  2804. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_run_from_mount_diskimage.yml +0 -29
  2805. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_script_with_upload_capabilities.yml +0 -37
  2806. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_send_mailmessage.yml +0 -28
  2807. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_sensitive_file_discovery.yml +0 -35
  2808. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_set_acl.yml +0 -32
  2809. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_set_acl_susp_location.yml +0 -49
  2810. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml +0 -40
  2811. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_shellcode_b64.yml +0 -28
  2812. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_shellintel_malicious_commandlets.yml +0 -27
  2813. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_software_discovery.yml +0 -29
  2814. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_store_file_in_alternate_data_stream.yml +0 -27
  2815. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_ace_tampering.yml +0 -33
  2816. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_ad_group_reco.yml +0 -32
  2817. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_alias_obfscuation.yml +0 -32
  2818. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_clear_eventlog.yml +0 -41
  2819. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_directory_enum.yml +0 -30
  2820. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_download.yml +0 -33
  2821. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_execute_batch_script.yml +0 -31
  2822. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_extracting.yml +0 -30
  2823. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_follina_execution.yml +0 -27
  2824. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_get_addefaultdomainpasswordpolicy.yml +0 -23
  2825. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_get_current_user.yml +0 -26
  2826. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_get_gpo.yml +0 -23
  2827. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_get_process.yml +0 -23
  2828. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_getprocess_lsass.yml +0 -23
  2829. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_gettypefromclsid.yml +0 -25
  2830. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_hyper_v_condlet.yml +0 -26
  2831. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_invocation_generic.yml +0 -41
  2832. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_invocation_specific.yml +0 -81
  2833. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_invoke_webrequest_useragent.yml +0 -31
  2834. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_iofilestream.yml +0 -26
  2835. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_keylogger_activity.yml +0 -26
  2836. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_keywords.yml +0 -39
  2837. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_local_group_reco.yml +0 -38
  2838. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_mail_acces.yml +0 -29
  2839. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_mount_diskimage.yml +0 -25
  2840. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_mounted_share_deletion.yml +0 -32
  2841. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_networkcredential.yml +0 -27
  2842. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_new_psdrive.yml +0 -29
  2843. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_proxy_scripts.yml +0 -25
  2844. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_recon_export.yml +0 -28
  2845. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_remove_adgroupmember.yml +0 -27
  2846. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_service_dacl_modification_set_service.yml +0 -41
  2847. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_set_alias.yml +0 -44
  2848. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_smb_share_reco.yml +0 -26
  2849. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_ssl_keyword.yml +0 -26
  2850. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_start_process.yml +0 -26
  2851. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_unblock_file.yml +0 -25
  2852. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_wallpaper.yml +0 -30
  2853. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_win32_pnpentity.yml +0 -23
  2854. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_win32_shadowcopy_deletion.yml +0 -41
  2855. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_windowstyle.yml +0 -32
  2856. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_write_eventlog.yml +0 -23
  2857. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_susp_zip_compress.yml +0 -36
  2858. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_syncappvpublishingserver_exe.yml +0 -28
  2859. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_tamper_windows_defender_rem_mp.yml +0 -31
  2860. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_tamper_windows_defender_set_mp.yml +0 -86
  2861. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_test_netconnection.yml +0 -32
  2862. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_timestomp.yml +0 -32
  2863. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_token_obfuscation.yml +0 -48
  2864. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_user_discovery_get_aduser.yml +0 -34
  2865. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_user_profile_tampering.yml +0 -35
  2866. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_using_set_service_to_hide_services.yml +0 -34
  2867. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_vbscript_registry_modification.yml +0 -37
  2868. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_veeam_credential_dumping_script.yml +0 -26
  2869. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_web_request_cmd_and_cmdlets.yml +0 -40
  2870. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_win32_nteventlogfile_usage.yml +0 -32
  2871. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_win32_product_install_msi.yml +0 -27
  2872. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_win_api_functions_access.yml +0 -38
  2873. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_win_api_library_access.yml +0 -69
  2874. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_win_api_susp_access.yml +0 -48
  2875. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_win_defender_exclusions_added.yml +0 -36
  2876. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_windows_firewall_profile_disabled.yml +0 -39
  2877. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_winlogon_helper_dll.yml +0 -32
  2878. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_wmi_persistence.yml +0 -34
  2879. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_wmi_unquoted_service_search.yml +0 -36
  2880. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_wmimplant.yml +0 -45
  2881. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_x509enrollment.yml +0 -29
  2882. package/bundled-rules/sigma-rules/community/windows/powershell/powershell_script/posh_ps_xml_iex.yml +0 -35
  2883. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_cmstp_execution_by_access.yml +0 -28
  2884. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_hktl_cobaltstrike_bof_injection_pattern.yml +0 -28
  2885. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_hktl_generic_access.yml +0 -110
  2886. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_hktl_handlekatz_lsass_access.yml +0 -30
  2887. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_hktl_littlecorporal_generated_maldoc.yml +0 -28
  2888. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_hktl_sysmonente.yml +0 -38
  2889. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_dump_comsvcs_dll.yml +0 -25
  2890. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_dump_keyword_image.yml +0 -52
  2891. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_memdump.yml +0 -56
  2892. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_powershell_access.yml +0 -31
  2893. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_python_based_tool.yml +0 -37
  2894. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_remote_access_trough_winrm.yml +0 -30
  2895. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_seclogon_access.yml +0 -26
  2896. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_susp_access_flag.yml +0 -125
  2897. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_susp_source_process.yml +0 -137
  2898. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_uncommon_access_flag.yml +0 -110
  2899. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_werfault.yml +0 -26
  2900. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_lsass_whitelisted_process_names.yml +0 -57
  2901. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_susp_all_access_uncommon_target.yml +0 -33
  2902. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_susp_dbgcore_dbghelp_load.yml +0 -64
  2903. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_susp_direct_ntopenprocess_call.yml +0 -73
  2904. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_susp_potential_shellcode_injection.yml +0 -56
  2905. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_svchost_credential_dumping.yml +0 -28
  2906. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_svchost_susp_access_request.yml +0 -32
  2907. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_uac_bypass_editionupgrademanagerobj.yml +0 -24
  2908. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_uac_bypass_wow64_logger.yml +0 -25
  2909. package/bundled-rules/sigma-rules/community/windows/process_access/proc_access_win_werfaultsecure_msmpeng_access.yml +0 -42
  2910. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_7zip_exfil_dmp_files.yml +0 -38
  2911. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_7zip_password_compression.yml +0 -35
  2912. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_7zip_password_extraction.yml +0 -35
  2913. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_acccheckconsole_execution.yml +0 -33
  2914. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_addinutil_suspicious_cmdline.yml +0 -46
  2915. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_addinutil_uncommon_child_process.yml +0 -27
  2916. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_addinutil_uncommon_cmdline.yml +0 -33
  2917. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_addinutil_uncommon_dir_exec.yml +0 -30
  2918. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_adplus_memory_dump.yml +0 -39
  2919. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_agentexecutor_potential_abuse.yml +0 -43
  2920. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_agentexecutor_susp_usage.yml +0 -47
  2921. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_amsi_registry_tampering.yml +0 -55
  2922. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_appvlp_uncommon_child_process.yml +0 -43
  2923. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_arcsoc_susp_child_process.yml +0 -40
  2924. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_aspnet_compiler_exectuion.yml +0 -35
  2925. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_aspnet_compiler_susp_child_process.yml +0 -42
  2926. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_aspnet_compiler_susp_paths.yml +0 -44
  2927. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_at_interactive_execution.yml +0 -31
  2928. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_atbroker_uncommon_ats_execution.yml +0 -61
  2929. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_attrib_hiding_files.yml +0 -33
  2930. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_attrib_system.yml +0 -31
  2931. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_attrib_system_susp_paths.yml +0 -52
  2932. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_auditpol_nt_resource_kit_usage.yml +0 -34
  2933. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_auditpol_susp_execution.yml +0 -34
  2934. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_autorun_registry_modified_via_wmic.yml +0 -62
  2935. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_baaupdate_susp_child_process.yml +0 -40
  2936. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bash_command_execution.yml +0 -32
  2937. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bash_file_execution.yml +0 -44
  2938. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bcdedit_boot_conf_tamper.yml +0 -38
  2939. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bcdedit_susp_execution.yml +0 -31
  2940. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bcp_export_data.yml +0 -35
  2941. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bginfo_suspicious_child_process.yml +0 -47
  2942. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bginfo_uncommon_child_process.yml +0 -31
  2943. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bitlockertogo_execution.yml +0 -28
  2944. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bitsadmin_download.yml +0 -44
  2945. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bitsadmin_download_direct_ip.yml +0 -51
  2946. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bitsadmin_download_file_sharing_domains.yml +0 -77
  2947. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bitsadmin_download_susp_extensions.yml +0 -75
  2948. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bitsadmin_download_susp_targetfolder.yml +0 -71
  2949. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_bitsadmin_potential_persistence.yml +0 -45
  2950. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_boinc_execution.yml +0 -26
  2951. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_browsers_chromium_headless_debugging.yml +0 -33
  2952. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_browsers_chromium_headless_exec.yml +0 -33
  2953. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_browsers_chromium_headless_file_download.yml +0 -60
  2954. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_browsers_chromium_load_extension.yml +0 -34
  2955. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_browsers_chromium_mockbin_abuse.yml +0 -32
  2956. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_browsers_chromium_susp_load_extension.yml +0 -43
  2957. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_browsers_inline_file_download.yml +0 -55
  2958. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_browsers_remote_debugging.yml +0 -33
  2959. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_browsers_tor_execution.yml +0 -27
  2960. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_calc_uncommon_exec.yml +0 -30
  2961. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cdb_arbitrary_command_execution.yml +0 -32
  2962. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certmgr_certificate_installation.yml +0 -35
  2963. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certoc_download.yml +0 -30
  2964. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certoc_download_direct_ip.yml +0 -30
  2965. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certoc_load_dll.yml +0 -30
  2966. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certoc_load_dll_susp_locations.yml +0 -38
  2967. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certreq_download.yml +0 -32
  2968. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certutil_certificate_installation.yml +0 -36
  2969. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certutil_decode.yml +0 -33
  2970. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certutil_download.yml +0 -41
  2971. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certutil_download_direct_ip.yml +0 -78
  2972. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certutil_download_file_sharing_domains.yml +0 -75
  2973. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certutil_encode.yml +0 -28
  2974. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certutil_encode_susp_extensions.yml +0 -47
  2975. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certutil_encode_susp_location.yml +0 -42
  2976. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certutil_export_pfx.yml +0 -26
  2977. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_certutil_ntlm_coercion.yml +0 -28
  2978. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_chcp_codepage_lookup.yml +0 -34
  2979. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_chcp_codepage_switch.yml +0 -31
  2980. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cipher_overwrite_deleted_data.yml +0 -34
  2981. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_citrix_trolleyexpress_procdump.yml +0 -40
  2982. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_clip_execution.yml +0 -30
  2983. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cloudflared_portable_execution.yml +0 -30
  2984. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cloudflared_quicktunnel_execution.yml +0 -88
  2985. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cloudflared_tunnel_cleanup.yml +0 -30
  2986. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cloudflared_tunnel_run.yml +0 -33
  2987. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_assoc_execution.yml +0 -32
  2988. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_assoc_tamper_exe_file_association.yml +0 -35
  2989. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_copy_dmp_from_share.yml +0 -31
  2990. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_curl_download_exec_combo.yml +0 -29
  2991. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_del_execution.yml +0 -37
  2992. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_del_greedy_deletion.yml +0 -36
  2993. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_dir_execution.yml +0 -32
  2994. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_dosfuscation.yml +0 -41
  2995. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_http_appdata.yml +0 -30
  2996. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_launched_with_hidden_start_flag.yml +0 -78
  2997. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_mklink_osk_cmd.yml +0 -31
  2998. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_mklink_shadow_copies_access_symlink.yml +0 -25
  2999. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_net_use_and_exec_combo.yml +0 -36
  3000. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_no_space_execution.yml +0 -66
  3001. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_ntdllpipe_redirect.yml +0 -25
  3002. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_path_traversal.yml +0 -39
  3003. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_ping_copy_combined_execution.yml +0 -33
  3004. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_ping_del_combined_execution.yml +0 -37
  3005. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_redirect.yml +0 -36
  3006. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_redirection_susp_folder.yml +0 -52
  3007. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_rmdir_execution.yml +0 -35
  3008. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_set_prompt_abuse.yml +0 -34
  3009. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_shadowcopy_access.yml +0 -28
  3010. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_stdin_redirect.yml +0 -28
  3011. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_sticky_key_like_backdoor_execution.yml +0 -45
  3012. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_sticky_keys_replace.yml +0 -30
  3013. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_type_arbitrary_file_download.yml +0 -28
  3014. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmd_unusual_parent.yml +0 -47
  3015. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmdkey_adding_generic_creds.yml +0 -37
  3016. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmdkey_recon.yml +0 -33
  3017. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmdl32_arbitrary_file_download.yml +0 -34
  3018. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_cmstp_execution_by_creation.yml +0 -26
  3019. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_comodo_ssh_shellhost_cmd_spawn.yml +0 -36
  3020. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_configsecuritypolicy_download_file.yml +0 -32
  3021. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_conhost_headless_execution.yml +0 -30
  3022. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_conhost_headless_powershell.yml +0 -35
  3023. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_conhost_legacy_option.yml +0 -30
  3024. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_conhost_path_traversal.yml +0 -22
  3025. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_conhost_susp_child_process.yml +0 -33
  3026. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_conhost_susp_winshell_child_process.yml +0 -44
  3027. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_conhost_uncommon_parent.yml +0 -55
  3028. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_control_panel_item.yml +0 -43
  3029. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_createdump_lolbin_execution.yml +0 -36
  3030. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_credential_guard_registry_tampering.yml +0 -62
  3031. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_csc_compilation.yml +0 -29
  3032. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_csc_susp_dynamic_compilation.yml +0 -73
  3033. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_csc_susp_parent.yml +0 -86
  3034. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_csi_execution.yml +0 -35
  3035. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_csi_use_of_csharp_console.yml +0 -28
  3036. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_csvde_export.yml +0 -30
  3037. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_cookie_hijacking.yml +0 -25
  3038. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_custom_user_agent.yml +0 -32
  3039. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_download.yml +0 -36
  3040. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_download_direct_ip_exec.yml +0 -81
  3041. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_download_direct_ip_susp_extensions.yml +0 -78
  3042. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_download_susp_file_sharing_domains.yml +0 -97
  3043. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_execution.yml +0 -28
  3044. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_fileupload.yml +0 -40
  3045. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_insecure_connection.yml +0 -25
  3046. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_insecure_proxy_or_doh.yml +0 -26
  3047. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_local_file_read.yml +0 -24
  3048. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_susp_download.yml +0 -72
  3049. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_curl_useragent.yml +0 -30
  3050. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_customshellhost_susp_exec.yml +0 -26
  3051. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dctask64_arbitrary_command_and_dll_execution.yml +0 -37
  3052. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_defaultpack_uncommon_child_process.yml +0 -24
  3053. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_defender_default_action_modified.yml +0 -47
  3054. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_defender_remove_context_menu.yml +0 -46
  3055. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_desktopimgdownldr_remote_file_download.yml +0 -23
  3056. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_desktopimgdownldr_susp_execution.yml +0 -32
  3057. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_devcon_disable_vmci_driver.yml +0 -39
  3058. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_device_credential_deployment.yml +0 -22
  3059. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_deviceenroller_dll_sideloading.yml +0 -33
  3060. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_devinit_lolbin_usage.yml +0 -26
  3061. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dfsvc_child_processes.yml +0 -23
  3062. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dfsvc_suspicious_child_processes.yml +0 -40
  3063. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dirlister_execution.yml +0 -30
  3064. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_discovery_via_reg_queries.yml +0 -54
  3065. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_diskshadow_child_process.yml +0 -37
  3066. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_diskshadow_child_process_susp.yml +0 -46
  3067. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_diskshadow_script_mode.yml +0 -40
  3068. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_diskshadow_script_mode_susp_ext.yml +0 -46
  3069. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_diskshadow_script_mode_susp_location.yml +0 -49
  3070. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dism_enable_powershell_web_access_feature.yml +0 -31
  3071. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dism_remove.yml +0 -45
  3072. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dll_sideload_vmware_xfer.yml +0 -25
  3073. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dllhost_no_cli_execution.yml +0 -30
  3074. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dns_exfiltration_tools_execution.yml +0 -27
  3075. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dns_susp_child_process.yml +0 -25
  3076. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dnscmd_discovery.yml +0 -30
  3077. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dnscmd_install_new_server_level_plugin_dll.yml +0 -34
  3078. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dnx_execute_csharp_code.yml +0 -26
  3079. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dotnet_arbitrary_dll_csproj_execution.yml +0 -41
  3080. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dotnet_trace_lolbin_execution.yml +0 -27
  3081. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dotnetdump_memory_dump.yml +0 -26
  3082. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_driverquery_recon.yml +0 -39
  3083. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_driverquery_usage.yml +0 -39
  3084. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dsacls_abuse_permissions.yml +0 -34
  3085. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dsacls_password_spray.yml +0 -29
  3086. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dsquery_domain_trust_discovery.yml +0 -37
  3087. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dtrace_kernel_dump.yml +0 -28
  3088. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dump64_defender_av_bypass_rename.yml +0 -31
  3089. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dumpminitool_execution.yml +0 -39
  3090. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dumpminitool_susp_execution.yml +0 -46
  3091. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_dxcap_arbitrary_binary_execution.yml +0 -27
  3092. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_esentutl_params.yml +0 -27
  3093. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_esentutl_sensitive_file_copy.yml +0 -46
  3094. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_esentutl_webcache.yml +0 -29
  3095. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_event_logging_disable_via_key_minint.yml +0 -50
  3096. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_eventvwr_susp_child_process.yml +0 -33
  3097. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_expand_cabinet_files.yml +0 -49
  3098. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_explorer_break_process_tree.yml +0 -33
  3099. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_explorer_child_of_shell_process.yml +0 -33
  3100. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_explorer_folder_shortcut_via_shell_binary.yml +0 -29
  3101. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_explorer_nouaccheck.yml +0 -28
  3102. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_extexport_execution.yml +0 -32
  3103. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_findstr_download.yml +0 -41
  3104. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_findstr_gpp_passwords.yml +0 -38
  3105. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_findstr_lnk.yml +0 -34
  3106. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_findstr_lsass.yml +0 -38
  3107. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_findstr_password_recon.yml +0 -35
  3108. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_findstr_recon_everyone.yml +0 -45
  3109. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_findstr_recon_pipe_output.yml +0 -45
  3110. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_findstr_security_keyword_lookup.yml +0 -69
  3111. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_findstr_subfolder_search.yml +0 -39
  3112. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_findstr_sysmon_discovery_via_default_altitude.yml +0 -29
  3113. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_finger_execution.yml +0 -34
  3114. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_fltmc_unload_driver.yml +0 -42
  3115. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_fltmc_unload_driver_sysmon.yml +0 -32
  3116. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_forfiles_child_process_masquerading.yml +0 -39
  3117. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_forfiles_proxy_execution_.yml +0 -34
  3118. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_format_uncommon_filesystem_load.yml +0 -31
  3119. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_fsi_fsharp_code_execution.yml +0 -32
  3120. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_fsutil_drive_enumeration.yml +0 -26
  3121. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_fsutil_symlinkevaluation.yml +0 -46
  3122. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_fsutil_usage.yml +0 -37
  3123. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ftp_arbitrary_command_execution.yml +0 -29
  3124. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_gfxdownloadwrapper_arbitrary_file_download.yml +0 -27
  3125. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_git_susp_clone.yml +0 -46
  3126. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_github_self_hosted_runner.yml +0 -41
  3127. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_googleupdate_susp_child_process.yml +0 -33
  3128. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_gpg4win_decryption.yml +0 -29
  3129. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_gpg4win_encryption.yml +0 -29
  3130. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_gpg4win_portable_execution.yml +0 -32
  3131. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_gpg4win_susp_location.yml +0 -36
  3132. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_gpresult_execution.yml +0 -33
  3133. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_gup_arbitrary_binary_execution.yml +0 -29
  3134. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_gup_download.yml +0 -29
  3135. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_gup_susp_child_process.yml +0 -48
  3136. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_gup_suspicious_execution.yml +0 -33
  3137. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hh_chm_execution.yml +0 -28
  3138. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hh_chm_remote_download_or_execution.yml +0 -30
  3139. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hh_html_help_susp_child_process.yml +0 -53
  3140. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hh_susp_execution.yml +0 -51
  3141. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_adcspwn.yml +0 -25
  3142. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_bloodhound_sharphound.yml +0 -53
  3143. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_c3_rundll32_pattern.yml +0 -25
  3144. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_certify.yml +0 -40
  3145. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_certipy.yml +0 -55
  3146. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_cobaltstrike_bloopers_cmd.yml +0 -44
  3147. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_cobaltstrike_bloopers_modules.yml +0 -37
  3148. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_cobaltstrike_load_by_rundll32.yml +0 -33
  3149. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_cobaltstrike_process_patterns.yml +0 -39
  3150. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_coercedpotato.yml +0 -31
  3151. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_covenant.yml +0 -35
  3152. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_crackmapexec_execution.yml +0 -77
  3153. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_crackmapexec_execution_patterns.yml +0 -38
  3154. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_crackmapexec_patterns.yml +0 -44
  3155. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_crackmapexec_powershell_obfuscation.yml +0 -39
  3156. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_createminidump.yml +0 -23
  3157. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_dinjector.yml +0 -25
  3158. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_doppelganger.yml +0 -25
  3159. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_dumpert.yml +0 -24
  3160. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_edr_freeze.yml +0 -40
  3161. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_edrsilencer.yml +0 -24
  3162. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_empire_powershell_launch.yml +0 -31
  3163. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_empire_powershell_uac_bypass.yml +0 -27
  3164. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_evil_winrm.yml +0 -27
  3165. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_execution_via_imphashes.yml +0 -112
  3166. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_execution_via_pe_metadata.yml +0 -25
  3167. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_gmer.yml +0 -26
  3168. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_handlekatz.yml +0 -36
  3169. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_hashcat.yml +0 -28
  3170. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_hollowreaper.yml +0 -24
  3171. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_htran_or_natbypass.yml +0 -30
  3172. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_hydra.yml +0 -28
  3173. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_impacket_lateral_movement.yml +0 -68
  3174. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_impacket_tools.yml +0 -75
  3175. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_impersonate.yml +0 -35
  3176. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_inveigh.yml +0 -33
  3177. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_invoke_obfuscation_clip.yml +0 -34
  3178. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_invoke_obfuscation_obfuscated_iex_commandline.yml +0 -30
  3179. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_invoke_obfuscation_stdin.yml +0 -26
  3180. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_invoke_obfuscation_var.yml +0 -26
  3181. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_invoke_obfuscation_via_compress.yml +0 -30
  3182. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_invoke_obfuscation_via_stdin.yml +0 -24
  3183. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_invoke_obfuscation_via_use_clip.yml +0 -26
  3184. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_invoke_obfuscation_via_use_mhsta.yml +0 -30
  3185. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_invoke_obfuscation_via_var.yml +0 -38
  3186. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_jlaive_batch_execution.yml +0 -40
  3187. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_koadic.yml +0 -32
  3188. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_krbrelay.yml +0 -38
  3189. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_krbrelay_remote.yml +0 -59
  3190. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_krbrelayup.yml +0 -41
  3191. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_lazagne.yml +0 -140
  3192. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_localpotato.yml +0 -32
  3193. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_meterpreter_getsystem.yml +0 -46
  3194. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_mimikatz_command_line.yml +0 -54
  3195. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_pchunter.yml +0 -44
  3196. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_powersploit_empire_default_schtasks.yml +0 -42
  3197. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_powertool.yml +0 -28
  3198. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_purplesharp_indicators.yml +0 -27
  3199. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_pypykatz.yml +0 -28
  3200. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_quarks_pwdump.yml +0 -33
  3201. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_redmimicry_winnti_playbook.yml +0 -31
  3202. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_relay_attacks_tools.yml +0 -59
  3203. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_rubeus.yml +0 -49
  3204. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_safetykatz.yml +0 -24
  3205. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_secutyxploded.yml +0 -25
  3206. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_selectmyparent.yml +0 -49
  3207. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharp_chisel.yml +0 -28
  3208. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharp_dpapi_execution.yml +0 -50
  3209. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharp_impersonation.yml +0 -39
  3210. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharp_ldap_monitor.yml +0 -27
  3211. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharpersist.yml +0 -42
  3212. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharpevtmute.yml +0 -29
  3213. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharpldapwhoami.yml +0 -34
  3214. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharpmove.yml +0 -39
  3215. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharpsuccessor_execution.yml +0 -31
  3216. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharpup.yml +0 -37
  3217. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharpview.yml +0 -141
  3218. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sharpwsus_wsuspendu_execution.yml +0 -43
  3219. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_silenttrinity_stager.yml +0 -25
  3220. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sliver_c2_execution_pattern.yml +0 -23
  3221. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_soaphound_execution.yml +0 -33
  3222. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_stracciatella_execution.yml +0 -30
  3223. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_sysmoneop.yml +0 -27
  3224. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_trufflesnout.yml +0 -25
  3225. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_uacme.yml +0 -52
  3226. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_wce.yml +0 -38
  3227. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_winpeas.yml +0 -48
  3228. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_winpwn.yml +0 -44
  3229. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_wmiexec_default_powershell.yml +0 -21
  3230. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_wsass.yml +0 -32
  3231. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_xordump.yml +0 -29
  3232. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hktl_zipexec.yml +0 -34
  3233. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hostname_execution.yml +0 -22
  3234. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hvci_registry_tampering.yml +0 -53
  3235. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hwp_exploits.yml +0 -31
  3236. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_hxtsr_masquerading.yml +0 -29
  3237. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_icacls_deny.yml +0 -27
  3238. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ieexec_download.yml +0 -27
  3239. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_iexpress_execution.yml +0 -36
  3240. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_iexpress_susp_execution.yml +0 -40
  3241. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_iis_appcmd_http_logging.yml +0 -29
  3242. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_iis_appcmd_service_account_password_dumped.yml +0 -47
  3243. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_iis_appcmd_susp_module_install.yml +0 -31
  3244. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_iis_appcmd_susp_rewrite_rule.yml +0 -28
  3245. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_iis_connection_strings_decryption.yml +0 -27
  3246. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_iis_logs_deletion.yml +0 -47
  3247. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_iis_susp_module_registration.yml +0 -31
  3248. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ilasm_il_code_compilation.yml +0 -28
  3249. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_imagingdevices_unusual_parents.yml +0 -30
  3250. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_imewbdld_download.yml +0 -32
  3251. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_infdefaultinstall_execute_sct_scripts.yml +0 -25
  3252. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_installutil_download.yml +0 -29
  3253. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_instalutil_no_log_execution.yml +0 -26
  3254. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_java_keytool_susp_child_process.yml +0 -49
  3255. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_java_manageengine_susp_child_process.yml +0 -60
  3256. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_java_remote_debugging.yml +0 -30
  3257. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_java_susp_child_process.yml +0 -51
  3258. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_java_susp_child_process_2.yml +0 -35
  3259. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_java_sysaidserver_susp_child_process.yml +0 -24
  3260. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_jsc_execution.yml +0 -28
  3261. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_kavremover_uncommon_execution.yml +0 -25
  3262. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_kd_execution.yml +0 -23
  3263. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_kerberos_coercion_via_dns_spn_spoofing.yml +0 -38
  3264. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_keyscrambler_susp_child_process.yml +0 -48
  3265. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ksetup_password_change_computer.yml +0 -24
  3266. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ksetup_password_change_user.yml +0 -23
  3267. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ldifde_export.yml +0 -27
  3268. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ldifde_file_load.yml +0 -32
  3269. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_link_uncommon_parent_process.yml +0 -36
  3270. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lodctr_performance_counter_tampering.yml +0 -24
  3271. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_logman_disable_eventlog.yml +0 -36
  3272. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_data_exfiltration_by_using_datasvcutil.yml +0 -34
  3273. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_devtoolslauncher.yml +0 -24
  3274. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_diantz_ads.yml +0 -25
  3275. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_diantz_remote_cab.yml +0 -25
  3276. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_extrac32.yml +0 -31
  3277. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_extrac32_ads.yml +0 -25
  3278. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_gather_network_info.yml +0 -37
  3279. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_gpscript.yml +0 -30
  3280. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_ie4uinit.yml +0 -30
  3281. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_launch_vsdevshell.yml +0 -25
  3282. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_manage_bde.yml +0 -36
  3283. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_mavinject_process_injection.yml +0 -36
  3284. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_mpiexec.yml +0 -29
  3285. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_msdeploy.yml +0 -28
  3286. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_openconsole.yml +0 -24
  3287. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_openwith.yml +0 -24
  3288. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_pcalua.yml +0 -27
  3289. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_pcwrun.yml +0 -25
  3290. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_pcwrun_follina.yml +0 -23
  3291. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_pcwutl.yml +0 -28
  3292. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_pester.yml +0 -34
  3293. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_pester_1.yml +0 -39
  3294. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_printbrm.yml +0 -26
  3295. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_pubprn.yml +0 -23
  3296. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_rasautou_dll_execution.yml +0 -29
  3297. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_register_app.yml +0 -23
  3298. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_remote.yml +0 -23
  3299. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_replace.yml +0 -25
  3300. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_runexehelper.yml +0 -22
  3301. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_runscripthelper.yml +0 -25
  3302. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_scriptrunner.yml +0 -25
  3303. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_settingsynchost.yml +0 -32
  3304. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_sftp.yml +0 -28
  3305. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_susp_driver_installed_by_pnputil.yml +0 -32
  3306. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_susp_grpconv.yml +0 -24
  3307. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_susp_sqldumper_activity.yml +0 -27
  3308. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_syncappvpublishingserver_execute_psh.yml +0 -29
  3309. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_syncappvpublishingserver_vbs_execute_psh.yml +0 -26
  3310. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_tracker.yml +0 -38
  3311. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_ttdinject.yml +0 -22
  3312. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_tttracer_mod_load.yml +0 -29
  3313. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_unregmp2.yml +0 -25
  3314. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_utilityfunctions.yml +0 -23
  3315. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_visual_basic_compiler.yml +0 -23
  3316. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_visualuiaverifynative.yml +0 -25
  3317. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_vsiisexelauncher.yml +0 -26
  3318. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolbin_wfc.yml +0 -23
  3319. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lolscript_register_app.yml +0 -30
  3320. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_lsass_process_clone.yml +0 -26
  3321. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mftrace_child_process.yml +0 -22
  3322. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_microsoft_workflow_compiler_execution.yml +0 -29
  3323. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mmc_default_domain_gpo_modification_via_gpme.yml +0 -40
  3324. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mmc_mmc20_lateral_movement.yml +0 -26
  3325. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mmc_rlo_abuse_pattern.yml +0 -39
  3326. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mmc_susp_child_process.yml +0 -32
  3327. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mode_codepage_change.yml +0 -36
  3328. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mode_codepage_russian.yml +0 -40
  3329. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mofcomp_execution.yml +0 -51
  3330. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mpcmdrun_dll_sideload_defender.yml +0 -36
  3331. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mpcmdrun_download_arbitrary_file.yml +0 -32
  3332. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mpcmdrun_remove_windows_defender_definition.yml +0 -28
  3333. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msbuild_susp_parent_process.yml +0 -30
  3334. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msdt_answer_file_exec.yml +0 -28
  3335. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msdt_arbitrary_command_execution.yml +0 -31
  3336. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msdt_susp_cab_options.yml +0 -31
  3337. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msdt_susp_parent.yml +0 -39
  3338. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msedge_proxy_download.yml +0 -27
  3339. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mshta_http.yml +0 -29
  3340. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mshta_inline_vbscript.yml +0 -26
  3341. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mshta_javascript.yml +0 -26
  3342. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mshta_lethalhta_technique.yml +0 -23
  3343. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mshta_susp_child_processes.yml +0 -48
  3344. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mshta_susp_execution.yml +0 -74
  3345. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mshta_susp_pattern.yml +0 -54
  3346. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msiexec_dll.yml +0 -29
  3347. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msiexec_embedding.yml +0 -36
  3348. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msiexec_execute_dll.yml +0 -41
  3349. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msiexec_install_quiet.yml +0 -48
  3350. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msiexec_install_remote.yml +0 -44
  3351. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msiexec_masquerading.yml +0 -28
  3352. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msiexec_web_install.yml +0 -29
  3353. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msix_ai_stub_execution.yml +0 -34
  3354. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msohtmed_download.yml +0 -29
  3355. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mspub_download.yml +0 -29
  3356. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msra_process_injection.yml +0 -34
  3357. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mssql_sqlps_susp_execution.yml +0 -33
  3358. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mssql_sqltoolsps_susp_execution.yml +0 -31
  3359. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mssql_susp_child_process.yml +0 -47
  3360. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mssql_veaam_susp_child_processes.yml +0 -52
  3361. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mstsc_rdp_hijack_shadowing.yml +0 -25
  3362. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mstsc_remote_connection.yml +0 -32
  3363. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mstsc_run_local_rdp_file.yml +0 -31
  3364. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mstsc_run_local_rdp_file_susp_location.yml +0 -39
  3365. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_mstsc_run_local_rpd_file_susp_parent.yml +0 -38
  3366. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msxsl_execution.yml +0 -26
  3367. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_msxsl_remote_execution.yml +0 -23
  3368. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_execution.yml +0 -53
  3369. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_groups_and_accounts_recon.yml +0 -58
  3370. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_quic.yml +0 -33
  3371. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_share_unmount.yml +0 -31
  3372. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_start_service.yml +0 -29
  3373. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_stop_service.yml +0 -31
  3374. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_use_mount_admin_share.yml +0 -34
  3375. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_use_mount_internet_share.yml +0 -31
  3376. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_use_mount_share.yml +0 -34
  3377. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_use_network_connections_discovery.yml +0 -34
  3378. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_use_password_plaintext.yml +0 -39
  3379. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_user_add.yml +0 -36
  3380. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_user_add_never_expire.yml +0 -35
  3381. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_user_default_accounts_manipulation.yml +0 -68
  3382. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_net_view_share_and_sessions_enum.yml +0 -32
  3383. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_fw_add_rule.yml +0 -33
  3384. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_fw_allow_program_in_susp_location.yml +0 -61
  3385. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_fw_allow_rdp.yml +0 -35
  3386. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_fw_delete_rule.yml +0 -34
  3387. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_fw_disable.yml +0 -40
  3388. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_fw_enable_group_rule.yml +0 -33
  3389. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_fw_rules_discovery.yml +0 -34
  3390. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_fw_set_rule.yml +0 -28
  3391. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_helper_dll_persistence.yml +0 -37
  3392. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_packet_capture.yml +0 -29
  3393. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_port_forwarding.yml +0 -46
  3394. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_port_forwarding_3389.yml +0 -31
  3395. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_netsh_wifi_credential_harvesting.yml +0 -31
  3396. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_nltest_execution.yml +0 -29
  3397. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_nltest_recon.yml +0 -51
  3398. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_node_abuse.yml +0 -35
  3399. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_node_adobe_creative_cloud_abuse.yml +0 -25
  3400. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_notepad_local_passwd_discovery.yml +0 -29
  3401. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_nslookup_domain_discovery.yml +0 -25
  3402. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_nslookup_poweshell_download.yml +0 -34
  3403. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ntdsutil_susp_usage.yml +0 -38
  3404. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ntdsutil_usage.yml +0 -22
  3405. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_odbcconf_driver_install.yml +0 -32
  3406. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_odbcconf_driver_install_susp.yml +0 -32
  3407. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_odbcconf_exec_susp_locations.yml +0 -50
  3408. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_odbcconf_register_dll_regsvr.yml +0 -35
  3409. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_odbcconf_register_dll_regsvr_susp.yml +0 -32
  3410. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_odbcconf_response_file.yml +0 -35
  3411. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_odbcconf_response_file_susp.yml +0 -39
  3412. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_odbcconf_uncommon_child_process.yml +0 -24
  3413. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_arbitrary_cli_download.yml +0 -39
  3414. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_excel_dcom_lateral_movement.yml +0 -33
  3415. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_exec_from_trusted_locations.yml +0 -50
  3416. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_onenote_embedded_script_execution.yml +0 -33
  3417. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_onenote_susp_child_processes.yml +0 -125
  3418. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_outlook_enable_unsafe_client_mail_rules.yml +0 -29
  3419. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_outlook_execution_from_temp.yml +0 -22
  3420. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_outlook_susp_child_processes.yml +0 -63
  3421. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_outlook_susp_child_processes_remote.yml +0 -30
  3422. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_spawn_exe_from_users_directory.yml +0 -37
  3423. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_susp_child_processes.yml +0 -135
  3424. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_svchost_parent.yml +0 -34
  3425. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_office_winword_dll_load.yml +0 -30
  3426. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_offlinescannershell_mpclient_sideloading.yml +0 -31
  3427. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pdqdeploy_execution.yml +0 -30
  3428. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pdqdeploy_runner_susp_children.yml +0 -57
  3429. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_perl_inline_command_execution.yml +0 -25
  3430. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_php_inline_command_execution.yml +0 -26
  3431. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ping_hex_ip.yml +0 -25
  3432. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pktmon_execution.yml +0 -24
  3433. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_plink_port_forwarding.yml +0 -26
  3434. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_plink_susp_tunneling.yml +0 -33
  3435. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powercfg_execution.yml +0 -34
  3436. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_aadinternals_cmdlets_execution.yml +0 -65
  3437. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_abnormal_commandline_size.yml +0 -32
  3438. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_active_directory_module_dll_import.yml +0 -40
  3439. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_add_windows_capability.yml +0 -34
  3440. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_amsi_init_failed_bypass.yml +0 -32
  3441. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_amsi_null_bits_bypass.yml +0 -27
  3442. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_audio_capture.yml +0 -29
  3443. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_base64_encoded_cmd.yml +0 -44
  3444. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_base64_encoded_cmd_patterns.yml +0 -46
  3445. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_base64_encoded_obfusc.yml +0 -53
  3446. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_base64_frombase64string.yml +0 -29
  3447. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_base64_hidden_flag.yml +0 -79
  3448. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_base64_iex.yml +0 -46
  3449. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_base64_invoke.yml +0 -45
  3450. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_base64_mppreference.yml +0 -42
  3451. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_base64_reflection_assembly_load.yml +0 -45
  3452. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_base64_reflection_assembly_load_obfusc.yml +0 -53
  3453. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_base64_wmi_classes.yml +0 -76
  3454. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_cl_invocation.yml +0 -24
  3455. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_cl_loadassembly.yml +0 -26
  3456. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_cl_mutexverifiers.yml +0 -32
  3457. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_cmdline_convertto_securestring.yml +0 -32
  3458. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_cmdline_reversed_strings.yml +0 -64
  3459. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_cmdline_special_characters.yml +0 -42
  3460. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_comobject_msi.yml +0 -45
  3461. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_comobject_msi_remote.yml +0 -51
  3462. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_computer_discovery_get_adcomputer.yml +0 -42
  3463. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_console_history_file_access.yml +0 -25
  3464. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_create_service.yml +0 -28
  3465. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_crypto_namespace.yml +0 -45
  3466. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_decode_gzip.yml +0 -23
  3467. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_decrypt_pattern.yml +0 -50
  3468. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_defender_disable_feature.yml +0 -86
  3469. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_defender_exclusion.yml +0 -36
  3470. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_disable_defender_av_security_monitoring.yml +0 -49
  3471. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_disable_firewall.yml +0 -42
  3472. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_disable_ie_features.yml +0 -32
  3473. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_downgrade_attack.yml +0 -35
  3474. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_download_com_cradles.yml +0 -37
  3475. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_download_cradle_obfuscated.yml +0 -30
  3476. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_download_dll.yml +0 -32
  3477. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_download_iex.yml +0 -41
  3478. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_download_patterns.yml +0 -44
  3479. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_download_susp_file_sharing_domains.yml +0 -71
  3480. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_dsinternals_cmdlets.yml +0 -89
  3481. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_email_exfil.yml +0 -30
  3482. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_enable_susp_windows_optional_feature.yml +0 -39
  3483. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_encode.yml +0 -38
  3484. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_encoding_patterns.yml +0 -53
  3485. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_exec_data_file.yml +0 -32
  3486. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_export_certificate.yml +0 -30
  3487. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_frombase64string.yml +0 -25
  3488. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_frombase64string_archive.yml +0 -27
  3489. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_get_clipboard.yml +0 -26
  3490. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_get_localgroup_member_recon.yml +0 -36
  3491. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_getprocess_lsass.yml +0 -26
  3492. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_hide_services_via_set_service.yml +0 -39
  3493. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_iex_patterns.yml +0 -44
  3494. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_import_cert_susp_locations.yml +0 -33
  3495. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_import_module.yml +0 -39
  3496. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_import_module_susp_dirs.yml +0 -39
  3497. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_install_unsigned_appx_packages.yml +0 -38
  3498. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_invocation_specific.yml +0 -73
  3499. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_invoke_webrequest_direct_ip.yml +0 -49
  3500. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_invoke_webrequest_download.yml +0 -54
  3501. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_kerberos_kerberos_ticket_request_via_cli.yml +0 -39
  3502. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_mailboxexport_share.yml +0 -27
  3503. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_malicious_cmdlets.yml +0 -250
  3504. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_msexchange_transport_agent.yml +0 -25
  3505. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_new_netfirewallrule_allow.yml +0 -39
  3506. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_non_interactive_execution.yml +0 -44
  3507. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_obfuscation_via_utf8.yml +0 -26
  3508. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_public_folder.yml +0 -37
  3509. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_remotefxvgpudisablement_abuse.yml +0 -32
  3510. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_remove_mppreference.yml +0 -30
  3511. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_reverse_shell_connection.yml +0 -34
  3512. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_run_script_from_ads.yml +0 -30
  3513. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_run_script_from_input_stream.yml +0 -27
  3514. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_sam_access.yml +0 -32
  3515. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_script_engine_parent.yml +0 -30
  3516. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_service_dacl_modification_set_service.yml +0 -41
  3517. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_set_acl.yml +0 -38
  3518. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_set_acl_susp_location.yml +0 -49
  3519. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_set_policies_to_unsecure_level.yml +0 -63
  3520. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_set_service_disabled.yml +0 -30
  3521. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_shadowcopy_deletion.yml +0 -41
  3522. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_snapins_hafnium.yml +0 -41
  3523. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_stop_service.yml +0 -31
  3524. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_susp_child_processes.yml +0 -59
  3525. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_susp_download_patterns.yml +0 -32
  3526. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_susp_parameter_variation.yml +0 -133
  3527. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_susp_parent_process.yml +0 -61
  3528. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_susp_ps_appdata.yml +0 -34
  3529. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_token_obfuscation.yml +0 -35
  3530. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_uninstall_defender_feature.yml +0 -36
  3531. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_user_discovery_get_aduser.yml +0 -41
  3532. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_webclient_casing.yml +0 -174
  3533. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_x509enrollment.yml +0 -28
  3534. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_xor_commandline.yml +0 -51
  3535. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_powershell_zip_compress.yml +0 -35
  3536. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_presentationhost_download.yml +0 -29
  3537. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_presentationhost_uncommon_location_exec.yml +0 -31
  3538. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pressanykey_lolbin_execution.yml +0 -27
  3539. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_print_remote_file_copy.yml +0 -29
  3540. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_protocolhandler_download.yml +0 -30
  3541. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_provlaunch_potential_abuse.yml +0 -50
  3542. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_provlaunch_susp_child_process.yml +0 -49
  3543. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_psr_capture_screenshots.yml +0 -27
  3544. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_3proxy_execution.yml +0 -27
  3545. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_adfind_enumeration.yml +0 -42
  3546. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_adfind_execution.yml +0 -36
  3547. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_adfind_susp_usage.yml +0 -66
  3548. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_advanced_ip_scanner.yml +0 -35
  3549. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_advanced_port_scanner.yml +0 -31
  3550. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_advancedrun.yml +0 -40
  3551. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_advancedrun_priv_user.yml +0 -43
  3552. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_chisel.yml +0 -39
  3553. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_cleanwipe.yml +0 -33
  3554. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_crassus.yml +0 -24
  3555. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_csexec.yml +0 -27
  3556. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_defendercheck.yml +0 -23
  3557. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_ditsnap.yml +0 -24
  3558. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_frp.yml +0 -33
  3559. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_iox.yml +0 -34
  3560. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_kdu_driver_tool.yml +0 -36
  3561. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_mouselock_execution.yml +0 -26
  3562. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_netcat.yml +0 -41
  3563. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_netscan.yml +0 -31
  3564. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_ngrok.yml +0 -52
  3565. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_nimgrab.yml +0 -27
  3566. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_nimscan.yml +0 -29
  3567. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_nircmd.yml +0 -40
  3568. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_nircmd_as_system.yml +0 -25
  3569. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_nmap_zenmap.yml +0 -28
  3570. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_nps.yml +0 -35
  3571. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_nsudo.yml +0 -48
  3572. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_pingcastle.yml +0 -185
  3573. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_pingcastle_script_parent.yml +0 -90
  3574. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_process_hacker.yml +0 -49
  3575. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_radmin.yml +0 -26
  3576. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_rcedit_execution.yml +0 -41
  3577. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_rclone_execution.yml +0 -55
  3578. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_restic.yml +0 -48
  3579. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_runxcmd.yml +0 -28
  3580. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_seatbelt.yml +0 -56
  3581. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_system_informer.yml +0 -40
  3582. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_trufflehog.yml +0 -43
  3583. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_webbrowserpassview.yml +0 -23
  3584. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_pua_wsudo_susp_execution.yml +0 -33
  3585. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_python_adidnsdump.yml +0 -25
  3586. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_python_inline_command_execution.yml +0 -54
  3587. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_python_pty_spawn.yml +0 -33
  3588. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_qemu_suspicious_execution.yml +0 -38
  3589. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_query_session_exfil.yml +0 -24
  3590. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_quickassist_execution.yml +0 -25
  3591. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rar_compress_data.yml +0 -24
  3592. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rar_compression_with_password.yml +0 -29
  3593. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rar_susp_greedy_compression.yml +0 -42
  3594. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rasdial_execution.yml +0 -23
  3595. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rdp_enable_or_disable_via_win32_terminalservicesetting_wmi_class.yml +0 -45
  3596. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rdrleakdiag_process_dumping.yml +0 -38
  3597. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reagentc_disable_windows_recovery_environment.yml +0 -28
  3598. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_add_run_key.yml +0 -35
  3599. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_add_safeboot.yml +0 -33
  3600. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_bitlocker.yml +0 -36
  3601. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_credential_access_via_password_filter.yml +0 -28
  3602. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_defender_exclusion.yml +0 -33
  3603. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_delete_runmru.yml +0 -32
  3604. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_delete_safeboot.yml +0 -30
  3605. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_delete_services.yml +0 -28
  3606. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_desktop_background_change.yml +0 -55
  3607. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_direct_asep_registry_keys_modification.yml +0 -38
  3608. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_disable_defender_wmi_autologger.yml +0 -42
  3609. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_disable_sec_services.yml +0 -45
  3610. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_dumping_sensitive_hives.yml +0 -59
  3611. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_enable_windows_recall.yml +0 -44
  3612. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_enumeration_for_credentials_in_registry.yml +0 -38
  3613. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_import_from_suspicious_paths.yml +0 -38
  3614. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_lsa_disable_restricted_admin.yml +0 -33
  3615. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_lsa_ppl_protection_disabled.yml +0 -29
  3616. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_machineguid.yml +0 -25
  3617. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_modify_group_policy_settings.yml +0 -36
  3618. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_nolmhash.yml +0 -33
  3619. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_query_registry.yml +0 -34
  3620. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_rdp_keys_tamper.yml +0 -68
  3621. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_screensaver.yml +0 -54
  3622. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_service_imagepath_change.yml +0 -33
  3623. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_software_discovery.yml +0 -31
  3624. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_susp_paths.yml +0 -36
  3625. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_system_language_discovery.yml +0 -35
  3626. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_volsnap_disable.yml +0 -24
  3627. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_windows_defender_tamper.yml +0 -72
  3628. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_reg_write_protect_for_storage_disabled.yml +0 -28
  3629. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regasm_no_flag_or_dll_execution.yml +0 -35
  3630. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regasm_regsvcs_uncommon_extension_execution.yml +0 -40
  3631. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regasm_regsvcs_uncommon_location_execution.yml +0 -42
  3632. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regedit_export_critical_keys.yml +0 -39
  3633. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regedit_export_keys.yml +0 -39
  3634. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regedit_import_keys.yml +0 -41
  3635. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regedit_import_keys_ads.yml +0 -38
  3636. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regedit_trustedinstaller.yml +0 -26
  3637. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regini_ads.yml +0 -31
  3638. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regini_execution.yml +0 -31
  3639. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_cimprovider_dll_load.yml +0 -28
  3640. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_enumeration_for_credentials_cli.yml +0 -53
  3641. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_export_of_thirdparty_creds.yml +0 -51
  3642. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_ie_security_zone_protocol_defaults_downgrade.yml +0 -31
  3643. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_install_reg_debugger_backdoor.yml +0 -34
  3644. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_logon_script.yml +0 -26
  3645. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_new_network_provider.yml +0 -34
  3646. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_office_disable_python_security_warnings.yml +0 -30
  3647. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_privilege_escalation_via_service_key.yml +0 -34
  3648. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_provlaunch_provisioning_command.yml +0 -29
  3649. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_set_unsecure_powershell_policy.yml +0 -34
  3650. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_special_accounts_hide_user.yml +0 -35
  3651. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_registry_typed_paths_persistence.yml +0 -21
  3652. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regsvr32_dllregisterserver_exec.yml +0 -54
  3653. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regsvr32_flags_anomaly.yml +0 -25
  3654. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regsvr32_http_ip_pattern.yml +0 -63
  3655. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regsvr32_network_pattern.yml +0 -36
  3656. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regsvr32_remote_share.yml +0 -25
  3657. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regsvr32_susp_child_process.yml +0 -45
  3658. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regsvr32_susp_exec_path_1.yml +0 -34
  3659. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regsvr32_susp_exec_path_2.yml +0 -63
  3660. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regsvr32_susp_extensions.yml +0 -54
  3661. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regsvr32_susp_parent.yml +0 -37
  3662. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_regsvr32_uncommon_extension.yml +0 -41
  3663. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_action1_code_exec_and_remote_sessions.yml +0 -49
  3664. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_ammyy_admin_execution.yml +0 -23
  3665. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_anydesk.yml +0 -34
  3666. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_anydesk_piped_password_via_cli.yml +0 -27
  3667. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_anydesk_revoked_cert.yml +0 -44
  3668. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_anydesk_silent_install.yml +0 -26
  3669. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_anydesk_susp_exec.yml +0 -39
  3670. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_anyviewer_shell_exec.yml +0 -25
  3671. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_gotoopener.yml +0 -27
  3672. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_logmein.yml +0 -27
  3673. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_meshagent_arguments.yml +0 -30
  3674. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_meshagent_exec.yml +0 -29
  3675. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_netsupport.yml +0 -28
  3676. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_netsupport_susp_exec.yml +0 -28
  3677. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_renamed_meshagent_execution.yml +0 -37
  3678. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_rurat_non_default_location.yml +0 -28
  3679. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_screenconnect.yml +0 -27
  3680. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_screenconnect_child_proc.yml +0 -29
  3681. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_screenconnect_installation_cli_param.yml +0 -28
  3682. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_screenconnect_remote_execution.yml +0 -30
  3683. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_screenconnect_remote_execution_susp.yml +0 -42
  3684. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_screenconnect_webshell.yml +0 -25
  3685. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_simple_help.yml +0 -27
  3686. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_tacticalrmm_agent_registration_via_cli.yml +0 -32
  3687. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_teamviewer_incoming_connection.yml +0 -31
  3688. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_access_tools_ultraviewer.yml +0 -27
  3689. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_remote_time_discovery.yml +0 -29
  3690. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_adfind.yml +0 -64
  3691. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_autohotkey.yml +0 -39
  3692. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_autoit.yml +0 -44
  3693. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_binary.yml +0 -51
  3694. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_binary_highly_relevant.yml +0 -88
  3695. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_boinc.yml +0 -25
  3696. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_browsercore.yml +0 -26
  3697. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_cloudflared.yml +0 -88
  3698. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_createdump.yml +0 -39
  3699. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_curl.yml +0 -28
  3700. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_dctask64.yml +0 -36
  3701. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_ftp.yml +0 -27
  3702. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_gpg4win.yml +0 -23
  3703. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_jusched.yml +0 -27
  3704. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_mavinject.yml +0 -37
  3705. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_megasync.yml +0 -25
  3706. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_msdt.yml +0 -25
  3707. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_msteams.yml +0 -26
  3708. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_netsupport_rat.yml +0 -25
  3709. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_nircmd.yml +0 -28
  3710. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_office_processes.yml +0 -52
  3711. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_paexec.yml +0 -38
  3712. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_pingcastle.yml +0 -56
  3713. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_plink.yml +0 -29
  3714. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_pressanykey.yml +0 -28
  3715. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_rundll32_dllregisterserver.yml +0 -27
  3716. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_rurat.yml +0 -29
  3717. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_schtasks_execution.yml +0 -49
  3718. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_sysinternals_debugview.yml +0 -25
  3719. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_sysinternals_procdump.yml +0 -39
  3720. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_sysinternals_psexec_service.yml +0 -23
  3721. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_sysinternals_sdelete.yml +0 -27
  3722. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_vmnat.yml +0 -26
  3723. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_renamed_whoami.yml +0 -26
  3724. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rpcping_credential_capture.yml +0 -34
  3725. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ruby_inline_command_execution.yml +0 -25
  3726. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_ads_stored_dll_execution.yml +0 -28
  3727. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_advpack_obfuscated_ordinal_call.yml +0 -30
  3728. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_by_ordinal.yml +0 -48
  3729. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_dllregisterserver.yml +0 -38
  3730. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_inline_vbs.yml +0 -27
  3731. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_installscreensaver.yml +0 -26
  3732. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_keymgr.yml +0 -27
  3733. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_mshtml_runhtmlapplication.yml +0 -35
  3734. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_no_params.yml +0 -30
  3735. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_ntlmrelay.yml +0 -33
  3736. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_obfuscated_ordinal_call.yml +0 -35
  3737. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_parent_explorer.yml +0 -28
  3738. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_process_dump_via_comsvcs.yml +0 -58
  3739. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_registered_com_objects.yml +0 -32
  3740. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_run_locations.yml +0 -34
  3741. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_setupapi_installhinfsection.yml +0 -29
  3742. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_shell32_susp_execution.yml +0 -36
  3743. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_shelldispatch_potential_abuse.yml +0 -24
  3744. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_spawn_explorer.yml +0 -25
  3745. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_susp_activity.yml +0 -107
  3746. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_susp_control_dll_load.yml +0 -28
  3747. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_susp_execution_with_image_extension.yml +0 -41
  3748. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_susp_shellexec_execution.yml +0 -40
  3749. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_susp_shellexec_ordinal_execution.yml +0 -68
  3750. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_susp_shimcache_flush.yml +0 -36
  3751. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_sys.yml +0 -26
  3752. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_udl_exec.yml +0 -35
  3753. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_unc_path.yml +0 -28
  3754. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_uncommon_dll_extension.yml +0 -64
  3755. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_user32_dll.yml +0 -28
  3756. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_webdav_client_execution.yml +0 -30
  3757. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_webdav_client_susp_execution.yml +0 -54
  3758. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_rundll32_without_parameters.yml +0 -27
  3759. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_runonce_execution.yml +0 -29
  3760. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_change_sevice_image_path_by_non_admin.yml +0 -36
  3761. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_create_service.yml +0 -35
  3762. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_disable_service.yml +0 -31
  3763. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_new_kernel_driver.yml +0 -40
  3764. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_query.yml +0 -29
  3765. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_query_interesting_services.yml +0 -31
  3766. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_sdset_allow_service_changes.yml +0 -42
  3767. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_sdset_deny_service_access.yml +0 -42
  3768. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_sdset_hide_sevices.yml +0 -43
  3769. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_sdset_modification.yml +0 -35
  3770. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_service_path_modification.yml +0 -50
  3771. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_service_tamper_for_persistence.yml +0 -57
  3772. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sc_stop_service.yml +0 -29
  3773. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_appdata_local_system.yml +0 -41
  3774. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_change.yml +0 -74
  3775. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_creation.yml +0 -42
  3776. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_creation_from_susp_parent.yml +0 -39
  3777. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_creation_temp_folder.yml +0 -29
  3778. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_curl_and_powershell_combo.yml +0 -39
  3779. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_delete.yml +0 -38
  3780. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_delete_all.yml +0 -25
  3781. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_disable.yml +0 -41
  3782. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_env_folder.yml +0 -78
  3783. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_folder_combos.yml +0 -41
  3784. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_guid_task_name.yml +0 -37
  3785. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_one_time_only_midnight_task.yml +0 -39
  3786. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_openssh_tunnelling.yml +0 -36
  3787. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_persistence_windows_telemetry.yml +0 -34
  3788. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_powershell_persistence.yml +0 -36
  3789. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_reg_loader.yml +0 -45
  3790. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_reg_loader_encoded.yml +0 -43
  3791. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_schedule_type.yml +0 -40
  3792. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_schedule_type_system.yml +0 -39
  3793. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_schedule_via_masqueraded_xml_file.yml +0 -55
  3794. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_susp_pattern.yml +0 -69
  3795. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_system.yml +0 -55
  3796. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_schtasks_system_process.yml +0 -47
  3797. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_scrcons_susp_child_process.yml +0 -36
  3798. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sdbinst_shim_persistence.yml +0 -37
  3799. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sdbinst_susp_extension.yml +0 -44
  3800. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sdclt_child_process.yml +0 -24
  3801. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sdiagnhost_susp_child.yml +0 -48
  3802. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_secedit_execution.yml +0 -52
  3803. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_security_susp_node_js_execution.yml +0 -29
  3804. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_servu_susp_child_process.yml +0 -39
  3805. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_setres_uncommon_child_process.yml +0 -34
  3806. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_setspn_spn_enumeration.yml +0 -31
  3807. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_setup16_custom_lst_execution.yml +0 -29
  3808. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_shutdown_execution.yml +0 -25
  3809. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_shutdown_logoff.yml +0 -23
  3810. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sigverif_uncommon_child_process.yml +0 -28
  3811. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sndvol_susp_child_processes.yml +0 -23
  3812. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_soundrecorder_audio_capture.yml +0 -24
  3813. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_speechruntime_child_process.yml +0 -25
  3814. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_splwow64_cli_anomaly.yml +0 -23
  3815. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_spoolsv_susp_child_processes.yml +0 -82
  3816. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sqlcmd_veeam_db_recon.yml +0 -33
  3817. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sqlcmd_veeam_dump.yml +0 -28
  3818. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sqlite_chromium_profile_data.yml +0 -41
  3819. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sqlite_firefox_gecko_profile_data.yml +0 -32
  3820. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_squirrel_download.yml +0 -40
  3821. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_squirrel_proxy_execution.yml +0 -70
  3822. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ssh_port_forward.yml +0 -26
  3823. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ssh_proxy_execution.yml +0 -45
  3824. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ssh_rdp_tunneling.yml +0 -26
  3825. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ssm_agent_abuse.yml +0 -29
  3826. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_stordiag_susp_child_process.yml +0 -31
  3827. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_16bit_application.yml +0 -25
  3828. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_abusing_debug_privilege.yml +0 -47
  3829. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_add_user_local_admin_group.yml +0 -39
  3830. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_add_user_privileged_group.yml +0 -38
  3831. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_add_user_remote_desktop_group.yml +0 -41
  3832. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_alternate_data_streams.yml +0 -44
  3833. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_always_install_elevated_windows_installer.yml +0 -54
  3834. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_appx_execution.yml +0 -52
  3835. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_arbitrary_shell_execution_via_settingcontent.yml +0 -26
  3836. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_archiver_iso_phishing.yml +0 -29
  3837. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_automated_collection.yml +0 -44
  3838. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_bad_opsec_sacrificial_processes.yml +0 -60
  3839. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_browser_launch_from_document_reader_process.yml +0 -43
  3840. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_child_process_as_system_.yml +0 -45
  3841. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_cli_obfuscation_escape_char.yml +0 -29
  3842. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_cli_obfuscation_unicode.yml +0 -49
  3843. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_cli_obfuscation_unicode_img.yml +0 -65
  3844. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_clickfix_filefix_execution.yml +0 -50
  3845. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_clickfix_filefix_whitespace_padding.yml +0 -49
  3846. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_cmd_for_loop_execution_with_recursive_directory_search.yml +0 -36
  3847. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_commandline_path_traversal_evasion.yml +0 -34
  3848. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_compression_params.yml +0 -37
  3849. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_copy_browser_data.yml +0 -72
  3850. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_copy_lateral_movement.yml +0 -62
  3851. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_copy_system_dir.yml +0 -59
  3852. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_copy_system_dir_lolbin.yml +0 -63
  3853. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_crypto_mining_monero.yml +0 -46
  3854. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_data_exfiltration_via_cli.yml +0 -71
  3855. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_disable_raccine.yml +0 -34
  3856. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_double_extension.yml +0 -88
  3857. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_double_extension_parent.yml +0 -63
  3858. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_download_office_domain.yml +0 -39
  3859. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_dumpstack_log_evasion.yml +0 -23
  3860. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_elavated_msi_spawned_shell.yml +0 -35
  3861. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_electron_app_children.yml +0 -66
  3862. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_electron_execution_proxy.yml +0 -61
  3863. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_elevated_system_shell.yml +0 -43
  3864. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_elevated_system_shell_uncommon_parent.yml +0 -73
  3865. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_embed_exe_lnk.yml +0 -25
  3866. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_emoji_usage_in_cli_1.yml +0 -997
  3867. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_emoji_usage_in_cli_2.yml +0 -1014
  3868. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_emoji_usage_in_cli_3.yml +0 -1020
  3869. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_emoji_usage_in_cli_4.yml +0 -765
  3870. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_etw_modification_cmdline.yml +0 -35
  3871. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_etw_trace_evasion.yml +0 -54
  3872. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_event_log_query.yml +0 -48
  3873. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_eventlog_clear.yml +0 -76
  3874. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_eventlog_content_recon.yml +0 -117
  3875. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_execution_from_guid_folder_names.yml +0 -48
  3876. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_execution_from_public_folder_as_parent.yml +0 -46
  3877. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_execution_path.yml +0 -48
  3878. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_execution_path_webserver.yml +0 -34
  3879. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_exfil_and_tunneling_tool_execution.yml +0 -30
  3880. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_file_characteristics.yml +0 -32
  3881. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_file_permission_modifications.yml +0 -53
  3882. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_filefix_execution_pattern.yml +0 -72
  3883. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_gather_network_info_execution.yml +0 -33
  3884. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_hidden_dir_index_allocation.yml +0 -30
  3885. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_hiding_malware_in_fonts_folder.yml +0 -53
  3886. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_homoglyph_cyrillic_lookalikes.yml +0 -77
  3887. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_image_missing.yml +0 -37
  3888. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_inline_base64_mz_header.yml +0 -25
  3889. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_inline_node_js_execution.yml +0 -31
  3890. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_inline_win_api_access.yml +0 -82
  3891. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_jwt_token_search.yml +0 -42
  3892. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_lnk_exec_hidden_cmd.yml +0 -42
  3893. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_local_system_owner_account_discovery.yml +0 -65
  3894. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_lolbin_exec_from_non_c_drive.yml +0 -52
  3895. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_lsass_dmp_cli_keywords.yml +0 -49
  3896. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_ms_appinstaller_download.yml +0 -29
  3897. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_network_command.yml +0 -28
  3898. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_network_scan_loop.yml +0 -31
  3899. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_network_sniffing.yml +0 -29
  3900. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_no_image_name.yml +0 -20
  3901. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_non_exe_image.yml +0 -80
  3902. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_non_priv_reg_or_ps.yml +0 -41
  3903. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_ntds.yml +0 -72
  3904. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_nteventlogfile_usage.yml +0 -34
  3905. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_ntfs_short_name_path_use_cli.yml +0 -71
  3906. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_ntfs_short_name_path_use_image.yml +0 -48
  3907. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_ntfs_short_name_use_cli.yml +0 -50
  3908. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_ntfs_short_name_use_image.yml +0 -57
  3909. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_obfuscated_ip_download.yml +0 -56
  3910. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_obfuscated_ip_via_cli.yml +0 -49
  3911. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_open_html_file_from_download_folder.yml +0 -39
  3912. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_parent_execute_itself.yml +0 -61
  3913. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_parents.yml +0 -44
  3914. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_powershell_execution_via_dll.yml +0 -44
  3915. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_priv_escalation_via_named_pipe.yml +0 -35
  3916. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_private_keys_recon.yml +0 -49
  3917. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_privilege_escalation_cli_patterns.yml +0 -38
  3918. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_proc_wrong_parent.yml +0 -51
  3919. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_progname.yml +0 -65
  3920. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_recon.yml +0 -37
  3921. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_recycle_bin_fake_execution.yml +0 -29
  3922. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_redirect_local_admin_share.yml +0 -27
  3923. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_registry_modification_of_ms_setting_protocol_handler.yml +0 -50
  3924. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_remote_desktop_tunneling.yml +0 -28
  3925. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_right_to_left_override.yml +0 -34
  3926. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_script_exec_from_compressed_parent.yml +0 -57
  3927. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_script_exec_from_env_folder.yml +0 -58
  3928. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_script_exec_from_temp.yml +0 -42
  3929. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_sensitive_file_access_shadowcopy.yml +0 -32
  3930. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_service_creation.yml +0 -55
  3931. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_service_dir.yml +0 -36
  3932. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_service_tamper.yml +0 -295
  3933. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_shadow_copies_creation.yml +0 -38
  3934. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_shadow_copies_deletion.yml +0 -66
  3935. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_shell_spawn_susp_program.yml +0 -64
  3936. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_sysnative.yml +0 -37
  3937. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_system_exe_anomaly.yml +0 -111
  3938. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_system_user_anomaly.yml +0 -103
  3939. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_sysvol_access.yml +0 -25
  3940. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_task_folder_evasion.yml +0 -37
  3941. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_use_of_te_bin.yml +0 -28
  3942. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_use_of_vsjitdebugger_bin.yml +0 -31
  3943. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_userinit_child.yml +0 -31
  3944. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_velociraptor_child_process.yml +0 -44
  3945. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_weak_or_abused_passwords.yml +0 -37
  3946. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_web_request_cmd_and_cmdlets.yml +0 -44
  3947. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_whoami_as_param.yml +0 -23
  3948. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_susp_workfolders.yml +0 -25
  3949. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_svchost_execution_with_no_cli_flags.yml +0 -29
  3950. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_svchost_masqueraded_execution.yml +0 -36
  3951. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_svchost_termserv_proc_spawn.yml +0 -35
  3952. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_svchost_uncommon_command_line_flags.yml +0 -42
  3953. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_svchost_uncommon_parent_process.yml +0 -36
  3954. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_accesschk_check_permissions.yml +0 -36
  3955. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_adexplorer_execution.yml +0 -41
  3956. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_adexplorer_susp_execution.yml +0 -48
  3957. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_eula_accepted.yml +0 -26
  3958. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_livekd_execution.yml +0 -23
  3959. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_livekd_kernel_memory_dump.yml +0 -28
  3960. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_procdump.yml +0 -26
  3961. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_procdump_evasion.yml +0 -38
  3962. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_procdump_lsass.yml +0 -40
  3963. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_psexec_execution.yml +0 -25
  3964. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_psexec_paexec_escalate_system.yml +0 -48
  3965. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_psexec_remote_execution.yml +0 -33
  3966. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_psexesvc.yml +0 -26
  3967. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_psexesvc_as_system.yml +0 -27
  3968. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_psloglist.yml +0 -43
  3969. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_psservice.yml +0 -27
  3970. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_pssuspend_execution.yml +0 -30
  3971. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_pssuspend_susp_execution.yml +0 -31
  3972. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_sdelete.yml +0 -28
  3973. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_susp_psexec_paexec_flags.yml +0 -50
  3974. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_sysmon_config_update.yml +0 -27
  3975. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_sysmon_uninstall.yml +0 -27
  3976. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysinternals_tools_masquerading.yml +0 -239
  3977. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_sysprep_appdata.yml +0 -24
  3978. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_systeminfo_execution.yml +0 -24
  3979. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_systemsettingsadminflows_turn_on_dev_features.yml +0 -31
  3980. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_takeown_recursive_own.yml +0 -27
  3981. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_tapinstall_execution.yml +0 -30
  3982. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_tar_compression.yml +0 -33
  3983. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_tar_extraction.yml +0 -30
  3984. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_taskkill_execution.yml +0 -39
  3985. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_taskkill_sep.yml +0 -30
  3986. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_tasklist_basic_execution.yml +0 -25
  3987. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_tasklist_module_enumeration.yml +0 -32
  3988. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_taskmgr_localsystem.yml +0 -25
  3989. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_taskmgr_susp_child_process.yml +0 -27
  3990. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_teams_suspicious_command_line_cred_access.yml +0 -29
  3991. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_tpmvscmgr_add_virtual_smartcard.yml +0 -23
  3992. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_tscon_localsystem.yml +0 -27
  3993. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_tscon_rdp_redirect.yml +0 -26
  3994. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_tscon_rdp_session_hijacking.yml +0 -26
  3995. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_changepk_slui.yml +0 -31
  3996. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_cleanmgr.yml +0 -29
  3997. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_cmstp.yml +0 -35
  3998. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_cmstp_com_object_access.yml +0 -41
  3999. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_computerdefaults.yml +0 -32
  4000. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_consent_comctl32.yml +0 -29
  4001. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_dismhost.yml +0 -31
  4002. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_eventvwr_recentviews.yml +0 -30
  4003. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_fodhelper.yml +0 -24
  4004. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_hijacking_firwall_snap_in.yml +0 -25
  4005. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_icmluautil.yml +0 -29
  4006. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_idiagnostic_profile.yml +0 -30
  4007. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_ieinstal.yml +0 -30
  4008. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_msconfig_gui.yml +0 -29
  4009. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_ntfs_reparse_point.yml +0 -39
  4010. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_pkgmgr_dism.yml +0 -29
  4011. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_sdclt.yml +0 -27
  4012. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_trustedpath.yml +0 -31
  4013. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_winsat.yml +0 -29
  4014. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_wmp.yml +0 -32
  4015. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_wsreset.yml +0 -32
  4016. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uac_bypass_wsreset_integrity_level.yml +0 -30
  4017. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ultravnc.yml +0 -24
  4018. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_ultravnc_susp_execution.yml +0 -29
  4019. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_uninstall_crowdstrike_falcon.yml +0 -25
  4020. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_user_shell_folders_registry_modification.yml +0 -55
  4021. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_userdomain_variable_enumeration.yml +0 -24
  4022. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_userinit_uncommon_child_processes.yml +0 -52
  4023. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vaultcmd_list_creds.yml +0 -25
  4024. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vbscript_registry_modification.yml +0 -36
  4025. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_verclsid_runs_com.yml +0 -34
  4026. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_virtualbox_execution.yml +0 -31
  4027. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_virtualbox_vboxdrvinst_execution.yml +0 -30
  4028. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vmware_toolbox_cmd_persistence.yml +0 -31
  4029. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vmware_toolbox_cmd_persistence_susp.yml +0 -38
  4030. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vmware_vmtoolsd_susp_child_process.yml +0 -57
  4031. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vscode_child_processes_anomalies.yml +0 -53
  4032. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vscode_tunnel_execution.yml +0 -37
  4033. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vscode_tunnel_remote_shell_.yml +0 -35
  4034. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vscode_tunnel_renamed_execution.yml +0 -51
  4035. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vscode_tunnel_service_install.yml +0 -27
  4036. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vsdiagnostics_execution_proxy.yml +0 -28
  4037. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vshadow_exec.yml +0 -29
  4038. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vslsagent_agentextensionpath_load.yml +0 -24
  4039. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_vulnerable_driver_blocklist_registry_tampering.yml +0 -47
  4040. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_w32tm.yml +0 -30
  4041. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wab_execution_from_non_default_location.yml +0 -31
  4042. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wab_unusual_parents.yml +0 -36
  4043. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wbadmin_delete_all_backups.yml +0 -39
  4044. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wbadmin_delete_backups.yml +0 -41
  4045. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wbadmin_dump_sensitive_files.yml +0 -37
  4046. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wbadmin_restore_file.yml +0 -33
  4047. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wbadmin_restore_sensitive_files.yml +0 -40
  4048. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_webdav_lnk_execution.yml +0 -34
  4049. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_webdav_process_execution.yml +0 -29
  4050. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_webshell_chopper.yml +0 -36
  4051. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_webshell_hacking.yml +0 -101
  4052. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_webshell_recon_commands_and_processes.yml +0 -115
  4053. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_webshell_susp_process_spawned_from_webserver.yml +0 -88
  4054. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_webshell_tool_recon.yml +0 -52
  4055. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_werfault_lsass_shtinkering.yml +0 -41
  4056. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_werfault_reflect_debugger_exec.yml +0 -29
  4057. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_werfaultsecure_abuse.yml +0 -49
  4058. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wermgr_susp_child_process.yml +0 -54
  4059. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wermgr_susp_exec_location.yml +0 -31
  4060. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wget_download_direct_ip.yml +0 -61
  4061. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wget_download_susp_file_sharing_domains.yml +0 -95
  4062. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wget_download_susp_locations.yml +0 -48
  4063. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_where_browser_data_recon.yml +0 -41
  4064. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_whoami_all_execution.yml +0 -28
  4065. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_whoami_execution_from_high_priv_process.yml +0 -33
  4066. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_whoami_groups_discovery.yml +0 -26
  4067. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_whoami_output.yml +0 -32
  4068. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_whoami_parent_anomaly.yml +0 -43
  4069. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_whoami_priv_discovery.yml +0 -28
  4070. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_windows_terminal_susp_children.yml +0 -65
  4071. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winget_add_custom_source.yml +0 -33
  4072. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winget_add_insecure_custom_source.yml +0 -36
  4073. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winget_add_susp_custom_source.yml +0 -37
  4074. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winget_local_install_via_manifest.yml +0 -37
  4075. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winrar_exfil_dmp_files.yml +0 -34
  4076. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winrar_susp_child_process.yml +0 -45
  4077. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winrar_uncommon_folder_execution.yml +0 -37
  4078. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winrm_awl_bypass.yml +0 -32
  4079. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winrm_execution_via_scripting_api_winrm_vbs.yml +0 -31
  4080. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winrm_remote_powershell_session_process.yml +0 -25
  4081. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winrm_susp_child_process.yml +0 -35
  4082. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winrs_local_command_execution.yml +0 -40
  4083. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winrshost_command_execution.yml +0 -26
  4084. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winscp_command_open_ftp.yml +0 -28
  4085. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winscp_portable_execution.yml +0 -25
  4086. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_winzip_password_compression.yml +0 -30
  4087. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wlrmdr_uncommon_child_process.yml +0 -48
  4088. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmi_backdoor_exchange_transport_agent.yml +0 -29
  4089. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmi_password_never_expire.yml +0 -32
  4090. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmi_persistence_script_event_consumer.yml +0 -25
  4091. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_eventconsumer_creation.yml +0 -26
  4092. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_namespace_defender.yml +0 -29
  4093. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_process_creation.yml +0 -33
  4094. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_computersystem.yml +0 -26
  4095. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_csproduct.yml +0 -26
  4096. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_group.yml +0 -29
  4097. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_hotfix.yml +0 -26
  4098. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_process.yml +0 -31
  4099. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_product.yml +0 -32
  4100. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_product_class.yml +0 -36
  4101. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_service.yml +0 -32
  4102. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_system_info.yml +0 -66
  4103. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_system_info_uncommon.yml +0 -40
  4104. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_unquoted_service_search.yml +0 -34
  4105. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_recon_volume.yml +0 -42
  4106. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_remote_execution.yml +0 -35
  4107. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_service_manipulation.yml +0 -30
  4108. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_squiblytwo_bypass.yml +0 -53
  4109. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_stdregprov_reg_modification.yml +0 -36
  4110. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_susp_execution_via_office_process.yml +0 -64
  4111. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_susp_process_creation.yml +0 -55
  4112. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_terminate_application.yml +0 -30
  4113. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_uninstall_application.yml +0 -30
  4114. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_uninstall_security_products.yml +0 -85
  4115. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmic_xsl_script_processing.yml +0 -59
  4116. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmiprvse_spawning_process.yml +0 -41
  4117. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmiprvse_spawns_powershell.yml +0 -37
  4118. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wmiprvse_susp_child_processes.yml +0 -64
  4119. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wpbbin_potential_persistence.yml +0 -23
  4120. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wscript_cscript_dropper.yml +0 -44
  4121. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wscript_cscript_script_exec.yml +0 -43
  4122. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wscript_cscript_susp_child_processes.yml +0 -50
  4123. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wscript_cscript_uncommon_extension_exec.yml +0 -43
  4124. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wsl_arbitrary_command_execution.yml +0 -52
  4125. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wsl_child_processes_anomalies.yml +0 -50
  4126. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wsl_kali_linux_installation.yml +0 -31
  4127. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wsl_kali_linux_usage.yml +0 -47
  4128. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wsl_windows_binaries_execution.yml +0 -25
  4129. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wuauclt_dll_loading.yml +0 -48
  4130. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wuauclt_no_cli_flags_execution.yml +0 -28
  4131. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wusa_cab_files_extraction.yml +0 -27
  4132. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wusa_cab_files_extraction_from_susp_paths.yml +0 -35
  4133. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_wusa_susp_parent_execution.yml +0 -47
  4134. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_xwizard_execution_non_default_location.yml +0 -33
  4135. package/bundled-rules/sigma-rules/community/windows/process_creation/proc_creation_win_xwizard_runwizard_com_object_exec.yml +0 -27
  4136. package/bundled-rules/sigma-rules/community/windows/process_tampering/proc_tampering_susp_process_hollowing.yml +0 -35
  4137. package/bundled-rules/sigma-rules/community/windows/raw_access_thread/raw_access_thread_susp_disk_access_using_uncommon_tools.yml +0 -71
  4138. package/bundled-rules/sigma-rules/community/windows/registry/registry_add/registry_add_persistence_disk_cleanup_handler_entry.yml +0 -64
  4139. package/bundled-rules/sigma-rules/community/windows/registry/registry_delete/registry_delete_defender_context_menu.yml +0 -33
  4140. package/bundled-rules/sigma-rules/community/windows/registry/registry_delete/registry_delete_disable_credential_guard.yml +0 -32
  4141. package/bundled-rules/sigma-rules/community/windows/registry/registry_delete/registry_delete_enable_windows_recall.yml +0 -33
  4142. package/bundled-rules/sigma-rules/community/windows/registry/registry_delete/registry_delete_exploit_guard_protected_folders.yml +0 -23
  4143. package/bundled-rules/sigma-rules/community/windows/registry/registry_delete/registry_delete_mstsc_history_cleared.yml +0 -30
  4144. package/bundled-rules/sigma-rules/community/windows/registry/registry_delete/registry_delete_removal_amsi_registry_key.yml +0 -37
  4145. package/bundled-rules/sigma-rules/community/windows/registry/registry_delete/registry_delete_removal_com_hijacking_registry_key.yml +0 -97
  4146. package/bundled-rules/sigma-rules/community/windows/registry/registry_delete/registry_delete_runmru.yml +0 -28
  4147. package/bundled-rules/sigma-rules/community/windows/registry/registry_delete/registry_delete_schtasks_hide_task_via_index_value_removal.yml +0 -30
  4148. package/bundled-rules/sigma-rules/community/windows/registry/registry_delete/registry_delete_schtasks_hide_task_via_sd_value_removal.yml +0 -28
  4149. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_add_local_hidden_user.yml +0 -30
  4150. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_bypass_via_wsreset.yml +0 -24
  4151. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_cmstp_execution_by_registry.yml +0 -25
  4152. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_defender_threat_action_modified.yml +0 -40
  4153. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_disable_security_events_logging_adding_reg_key_minint.yml +0 -30
  4154. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_disable_wdigest_credential_guard.yml +0 -26
  4155. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_esentutl_volume_shadow_copy_service_keys.yml +0 -25
  4156. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_hack_wce_reg.yml +0 -23
  4157. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_hybridconnectionmgr_svc_installation.yml +0 -25
  4158. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_mal_azorult.yml +0 -28
  4159. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_malware_qakbot_registry.yml +0 -22
  4160. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_modify_screensaver_binary_path.yml +0 -28
  4161. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_narrator_feedback_persistance.yml +0 -27
  4162. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_net_ntlm_downgrade.yml +0 -46
  4163. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_new_dll_added_to_appcertdlls_registry_key.yml +0 -29
  4164. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_new_dll_added_to_appinit_dlls_registry_key.yml +0 -31
  4165. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_office_test_regadd.yml +0 -22
  4166. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_office_trust_record_modification.yml +0 -27
  4167. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_persistence_recycle_bin.yml +0 -29
  4168. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_portproxy_registry_key.yml +0 -28
  4169. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_redmimicry_winnti_reg.yml +0 -23
  4170. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_runkey_winekey.yml +0 -23
  4171. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_runonce_persistence.yml +0 -34
  4172. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_scheduled_task_creation.yml +0 -29
  4173. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_shell_open_keys_manipulation.yml +0 -42
  4174. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_silentprocessexit_lsass.yml +0 -26
  4175. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_ssp_added_lsa_config.yml +0 -31
  4176. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_stickykey_like_backdoor.yml +0 -34
  4177. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_susp_atbroker_change.yml +0 -35
  4178. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_susp_download_run_key.yml +0 -33
  4179. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_susp_lsass_dll_load.yml +0 -32
  4180. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_susp_mic_cam_access.yml +0 -37
  4181. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_event_susp_process_registry_modification.yml +0 -37
  4182. package/bundled-rules/sigma-rules/community/windows/registry/registry_event/registry_set_enable_anonymous_connection.yml +0 -22
  4183. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_add_load_service_in_safe_mode.yml +0 -54
  4184. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_add_port_monitor.yml +0 -46
  4185. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_aedebug_persistence.yml +0 -25
  4186. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_allow_rdp_remote_assistance_feature.yml +0 -30
  4187. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_amsi_com_hijack.yml +0 -25
  4188. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_amsi_disable.yml +0 -37
  4189. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_classes.yml +0 -59
  4190. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_common.yml +0 -79
  4191. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_currentcontrolset.yml +0 -62
  4192. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_currentversion.yml +0 -181
  4193. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_currentversion_nt.yml +0 -102
  4194. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_internet_explorer.yml +0 -49
  4195. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_office.yml +0 -86
  4196. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_session_manager.yml +0 -40
  4197. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_system_scripts.yml +0 -37
  4198. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_winsock2.yml +0 -37
  4199. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_wow6432node.yml +0 -119
  4200. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_wow6432node_classes.yml +0 -45
  4201. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_asep_reg_keys_modification_wow6432node_currentversion.yml +0 -40
  4202. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_bginfo_custom_db.yml +0 -22
  4203. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_bginfo_custom_vbscript.yml +0 -26
  4204. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_bginfo_custom_wmi_query.yml +0 -26
  4205. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_bypass_uac_using_delegateexecute.yml +0 -32
  4206. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_bypass_uac_using_eventviewer.yml +0 -32
  4207. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_bypass_uac_using_silentcleanup_task.yml +0 -36
  4208. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_change_rdp_port.yml +0 -38
  4209. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_change_security_zones.yml +0 -37
  4210. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_change_sysmon_driver_altitude.yml +0 -26
  4211. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_change_winevt_channelaccess.yml +0 -35
  4212. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_chrome_extension.yml +0 -132
  4213. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_clickonce_trust_prompt.yml +0 -31
  4214. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_cobaltstrike_service_installs.yml +0 -39
  4215. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_comhijack_sdclt.yml +0 -26
  4216. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_crashdump_disabled.yml +0 -25
  4217. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_create_minint_key.yml +0 -30
  4218. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_creation_service_susp_folder.yml +0 -53
  4219. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_credential_guard_disabled.yml +0 -31
  4220. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_custom_file_open_handler_powershell_execution.yml +0 -25
  4221. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_dbgmanageddebugger_persistence.yml +0 -27
  4222. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_defender_exclusions.yml +0 -25
  4223. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_desktop_background_change.yml +0 -60
  4224. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_devdrv_disallow_antivirus_filter.yml +0 -24
  4225. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_deviceguard_hypervisorenforcedcodeintegrity_disabled.yml +0 -37
  4226. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_deviceguard_hypervisorenforcedpagingtranslation_disabled.yml +0 -24
  4227. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_dhcp_calloutdll.yml +0 -29
  4228. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_administrative_share.yml +0 -32
  4229. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_autologger_sessions.yml +0 -42
  4230. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_defender_firewall.yml +0 -33
  4231. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_function_user.yml +0 -50
  4232. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_macroruntimescanscope.yml +0 -28
  4233. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_privacy_settings_experience.yml +0 -23
  4234. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_security_center_notifications.yml +0 -30
  4235. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_system_restore.yml +0 -28
  4236. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_windows_defender_service.yml +0 -24
  4237. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_windows_event_log_access.yml +0 -50
  4238. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_windows_firewall.yml +0 -25
  4239. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disable_winevt_logging.yml +0 -45
  4240. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disabled_exploit_guard_net_protection_on_ms_defender.yml +0 -23
  4241. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disabled_microsoft_defender_eventlog.yml +0 -23
  4242. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disabled_pua_protection_on_microsoft_defender.yml +0 -23
  4243. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disabled_tamper_protection_on_microsoft_defender.yml +0 -28
  4244. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disallowrun_execution.yml +0 -24
  4245. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_disk_cleanup_handler_autorun_persistence.yml +0 -48
  4246. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_dns_over_https_enabled.yml +0 -37
  4247. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_dns_server_level_plugin_dll.yml +0 -31
  4248. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_dot_net_etw_tamper.yml +0 -45
  4249. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_dsrm_tampering.yml +0 -36
  4250. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_enable_periodic_backup.yml +0 -24
  4251. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_enable_windows_recall.yml +0 -33
  4252. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_enabling_cor_profiler_env_variables.yml +0 -30
  4253. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_enabling_turnoffcheck.yml +0 -23
  4254. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_evtx_file_key_tamper.yml +0 -25
  4255. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_exploit_guard_susp_allowed_apps.yml +0 -30
  4256. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_fax_change_service_user.yml +0 -26
  4257. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_fax_dll_persistance.yml +0 -28
  4258. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_file_association_exefile.yml +0 -22
  4259. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_filefix_typedpath_commands.yml +0 -65
  4260. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_hangs_debugger_persistence.yml +0 -22
  4261. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_hhctrl_persistence.yml +0 -24
  4262. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_hidden_extention.yml +0 -28
  4263. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_hide_file.yml +0 -27
  4264. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_hide_function_user.yml +0 -34
  4265. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_hide_scheduled_task_via_index_tamper.yml +0 -32
  4266. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_hvci_disallowed_images.yml +0 -28
  4267. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_ie_security_zone_protocol_defaults_downgrade.yml +0 -31
  4268. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_ime_non_default_extension.yml +0 -31
  4269. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_ime_suspicious_paths.yml +0 -47
  4270. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_install_root_or_ca_certificat.yml +0 -34
  4271. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_internet_explorer_disable_first_run_customize.yml +0 -41
  4272. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_legalnotice_susp_message.yml +0 -28
  4273. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_lolbin_onedrivestandaloneupdater.yml +0 -24
  4274. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_lsa_disablerestrictedadmin.yml +0 -30
  4275. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_lsass_usermode_dumping.yml +0 -27
  4276. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_net_cli_ngenassemblyusagelog.yml +0 -26
  4277. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_netsh_help_dll_persistence_susp_location.yml +0 -49
  4278. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_netsh_helper_dll_potential_persistence.yml +0 -37
  4279. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_new_application_appcompat.yml +0 -25
  4280. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_new_network_provider.yml +0 -36
  4281. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_odbc_driver_registered.yml +0 -33
  4282. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_odbc_driver_registered_susp.yml +0 -49
  4283. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_access_vbom_tamper.yml +0 -29
  4284. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_disable_protected_view_features.yml +0 -42
  4285. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_disable_python_security_warnings.yml +0 -28
  4286. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_enable_dde.yml +0 -30
  4287. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_outlook_enable_load_macro_provider_on_boot.yml +0 -28
  4288. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_outlook_enable_macro_execution.yml +0 -28
  4289. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_outlook_enable_unsafe_client_mail_rules.yml +0 -30
  4290. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_outlook_security_settings.yml +0 -28
  4291. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_trust_record_susp_location.yml +0 -36
  4292. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_trusted_location.yml +0 -35
  4293. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_trusted_location_uncommon.yml +0 -45
  4294. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_office_vba_warnings_tamper.yml +0 -29
  4295. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_optimize_file_sharing_network.yml +0 -27
  4296. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_amsi_providers.yml +0 -41
  4297. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_app_cpmpat_layer_registerapprestart.yml +0 -26
  4298. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_app_paths.yml +0 -51
  4299. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_appx_debugger.yml +0 -28
  4300. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_autodial_dll.yml +0 -22
  4301. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_chm.yml +0 -24
  4302. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_com_hijacking_builtin.yml +0 -85
  4303. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_com_key_linking.yml +0 -36
  4304. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_comhijack_psfactorybuffer.yml +0 -30
  4305. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_custom_protocol_handler.yml +0 -35
  4306. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_event_viewer_events_asp.yml +0 -42
  4307. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_globalflags.yml +0 -39
  4308. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_ie.yml +0 -43
  4309. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_ifilter.yml +0 -71
  4310. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_logon_scripts_userinitmprlogonscript.yml +0 -30
  4311. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_lsa_extension.yml +0 -24
  4312. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_mpnotify.yml +0 -22
  4313. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_mycomputer.yml +0 -22
  4314. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_natural_language.yml +0 -32
  4315. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_office_vsto.yml +0 -67
  4316. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_outlook_homepage.yml +0 -33
  4317. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_outlook_todaypage.yml +0 -43
  4318. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_reflectdebugger.yml +0 -25
  4319. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_scrobj_dll.yml +0 -24
  4320. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_shim_database.yml +0 -35
  4321. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_shim_database_susp_application.yml +0 -36
  4322. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_shim_database_uncommon_location.yml +0 -29
  4323. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_typed_paths.yml +0 -26
  4324. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_persistence_xll.yml +0 -26
  4325. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_policies_associations_tamper.yml +0 -38
  4326. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_policies_attachments_tamper.yml +0 -31
  4327. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_potential_clickfix_execution.yml +0 -75
  4328. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_potential_oci_dll_redirection.yml +0 -34
  4329. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_powershell_as_service.yml +0 -26
  4330. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_powershell_crypto_namespace.yml +0 -46
  4331. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_powershell_enablescripts_enabled.yml +0 -24
  4332. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_powershell_execution_policy.yml +0 -41
  4333. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_powershell_in_run_keys.yml +0 -51
  4334. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_powershell_logging_disabled.yml +0 -40
  4335. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_provisioning_command_abuse.yml +0 -31
  4336. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_pua_sysinternals_execution_via_eula.yml +0 -24
  4337. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_pua_sysinternals_renamed_execution_via_eula.yml +0 -68
  4338. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_pua_sysinternals_susp_execution_via_eula.yml +0 -39
  4339. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_renamed_sysinternals_eula_accepted.yml +0 -56
  4340. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_rpcrt4_etw_tamper.yml +0 -28
  4341. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_runmru_command_execution.yml +0 -47
  4342. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_runmru_susp_command_execution.yml +0 -51
  4343. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_scr_file_executed_by_rundll32.yml +0 -31
  4344. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_sentinelone_shell_context_tampering.yml +0 -29
  4345. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_service_image_path_user_controlled_folder.yml +0 -51
  4346. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_servicedll_hijack.yml +0 -42
  4347. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_services_etw_tamper.yml +0 -25
  4348. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_set_nopolicies_user.yml +0 -34
  4349. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_shell_context_menu_tampering.yml +0 -24
  4350. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_sip_persistence.yml +0 -42
  4351. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_sophos_av_tamper.yml +0 -26
  4352. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_special_accounts.yml +0 -35
  4353. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_suppress_defender_notifications.yml +0 -24
  4354. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_susp_keyboard_layout_load.yml +0 -30
  4355. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_susp_pendingfilerenameoperations.yml +0 -34
  4356. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_susp_printer_driver.yml +0 -36
  4357. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_susp_reg_persist_explorer_run.yml +0 -31
  4358. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_susp_run_key_img_folder.yml +0 -69
  4359. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_susp_runmru_space_character.yml +0 -44
  4360. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_susp_service_installed.yml +0 -36
  4361. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_susp_shell_open_keys_modification_patterns.yml +0 -42
  4362. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_susp_typedpaths_space_characters.yml +0 -44
  4363. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_susp_user_shell_folders.yml +0 -56
  4364. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_susp_wfp_filter_added.yml +0 -30
  4365. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_suspicious_env_variables.yml +0 -60
  4366. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_system_lsa_nolmhash.yml +0 -30
  4367. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_taskcache_entry.yml +0 -77
  4368. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_telemetry_persistence.yml +0 -51
  4369. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_terminal_server_suspicious.yml +0 -40
  4370. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_terminal_server_tampering.yml +0 -85
  4371. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_timeproviders_dllname.yml +0 -32
  4372. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_tls_protocol_old_version_enabled.yml +0 -24
  4373. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_treatas_persistence.yml +0 -41
  4374. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_turn_on_dev_features.yml +0 -31
  4375. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_uac_bypass_eventvwr.yml +0 -25
  4376. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_uac_bypass_sdclt.yml +0 -28
  4377. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_uac_bypass_winsat.yml +0 -26
  4378. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_uac_bypass_wmp.yml +0 -24
  4379. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_uac_disable.yml +0 -30
  4380. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_uac_disable_notification.yml +0 -32
  4381. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_uac_disable_secure_desktop_prompt.yml +0 -31
  4382. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_vbs_payload_stored.yml +0 -41
  4383. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_vulnerable_driver_blocklist_disable.yml +0 -33
  4384. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_wab_dllpath_reg_change.yml +0 -26
  4385. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_wdigest_enable_uselogoncredential.yml +0 -26
  4386. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_windows_defender_tamper.yml +0 -66
  4387. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_winget_admin_settings_tampering.yml +0 -25
  4388. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_winget_enable_local_manifest.yml +0 -23
  4389. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_winlogon_allow_multiple_tssessions.yml +0 -27
  4390. package/bundled-rules/sigma-rules/community/windows/registry/registry_set/registry_set_winlogon_notify_key.yml +0 -26
  4391. package/bundled-rules/sigma-rules/community/windows/sysmon/sysmon_config_modification.yml +0 -25
  4392. package/bundled-rules/sigma-rules/community/windows/sysmon/sysmon_config_modification_error.yml +0 -33
  4393. package/bundled-rules/sigma-rules/community/windows/sysmon/sysmon_config_modification_status.yml +0 -27
  4394. package/bundled-rules/sigma-rules/community/windows/sysmon/sysmon_file_block_executable.yml +0 -21
  4395. package/bundled-rules/sigma-rules/community/windows/sysmon/sysmon_file_block_shredding.yml +0 -20
  4396. package/bundled-rules/sigma-rules/community/windows/sysmon/sysmon_file_executable_detected.yml +0 -21
  4397. package/bundled-rules/sigma-rules/community/windows/wmi_event/sysmon_wmi_event_subscription.yml +0 -28
  4398. package/bundled-rules/sigma-rules/community/windows/wmi_event/sysmon_wmi_susp_encoded_scripts.yml +0 -28
  4399. package/bundled-rules/sigma-rules/community/windows/wmi_event/sysmon_wmi_susp_scripting.yml +0 -39
  4400. package/bundled-rules/sigma-rules/custom/account-creation.yml +0 -73
  4401. package/bundled-rules/sigma-rules/custom/admin-panel-access.yml +0 -52
  4402. package/bundled-rules/sigma-rules/custom/anomalous-network.yml +0 -51
  4403. package/bundled-rules/sigma-rules/custom/api-rate-abuse.yml +0 -66
  4404. package/bundled-rules/sigma-rules/custom/brute-force.yml +0 -24
  4405. package/bundled-rules/sigma-rules/custom/cloud-api-abuse.yml +0 -113
  4406. package/bundled-rules/sigma-rules/custom/config-file-access.yml +0 -48
  4407. package/bundled-rules/sigma-rules/custom/container-escape.yml +0 -88
  4408. package/bundled-rules/sigma-rules/custom/credential-dumping.yml +0 -78
  4409. package/bundled-rules/sigma-rules/custom/cron-persistence.yml +0 -66
  4410. package/bundled-rules/sigma-rules/custom/crypto-mining.yml +0 -95
  4411. package/bundled-rules/sigma-rules/custom/data-exfiltration.yml +0 -91
  4412. package/bundled-rules/sigma-rules/custom/directory-traversal.yml +0 -41
  4413. package/bundled-rules/sigma-rules/custom/dns-zone-transfer.yml +0 -43
  4414. package/bundled-rules/sigma-rules/custom/email-exfil.yml +0 -56
  4415. package/bundled-rules/sigma-rules/custom/file-integrity.yml +0 -55
  4416. package/bundled-rules/sigma-rules/custom/file-permission-change.yml +0 -52
  4417. package/bundled-rules/sigma-rules/custom/firewall-disable.yml +0 -52
  4418. package/bundled-rules/sigma-rules/custom/kernel-module-load.yml +0 -74
  4419. package/bundled-rules/sigma-rules/custom/log-tampering.yml +0 -84
  4420. package/bundled-rules/sigma-rules/custom/memory-dump.yml +0 -80
  4421. package/bundled-rules/sigma-rules/custom/mysql-injection.yml +0 -51
  4422. package/bundled-rules/sigma-rules/custom/port-scanning.yml +0 -78
  4423. package/bundled-rules/sigma-rules/custom/privilege-escalation.yml +0 -63
  4424. package/bundled-rules/sigma-rules/custom/process-injection.yml +0 -59
  4425. package/bundled-rules/sigma-rules/custom/ransomware-indicators.yml +0 -78
  4426. package/bundled-rules/sigma-rules/custom/rdp-brute-force.yml +0 -72
  4427. package/bundled-rules/sigma-rules/custom/registry-persistence.yml +0 -43
  4428. package/bundled-rules/sigma-rules/custom/reverse-shell.yml +0 -69
  4429. package/bundled-rules/sigma-rules/custom/scheduled-task-creation.yml +0 -53
  4430. package/bundled-rules/sigma-rules/custom/service-creation.yml +0 -71
  4431. package/bundled-rules/sigma-rules/custom/ssh-key-theft.yml +0 -54
  4432. package/bundled-rules/sigma-rules/custom/ssh-lateral-movement.yml +0 -71
  4433. package/bundled-rules/sigma-rules/custom/supply-chain-attack.yml +0 -94
  4434. package/bundled-rules/sigma-rules/custom/suspicious-dns.yml +0 -79
  4435. package/bundled-rules/sigma-rules/custom/suspicious-download.yml +0 -54
  4436. package/bundled-rules/sigma-rules/custom/suspicious-network-tool.yml +0 -56
  4437. package/bundled-rules/sigma-rules/custom/suspicious-powershell.yml +0 -95
  4438. package/bundled-rules/sigma-rules/custom/suspicious-process.yml +0 -57
  4439. package/bundled-rules/sigma-rules/custom/suspicious-user-agent.yml +0 -46
  4440. package/bundled-rules/sigma-rules/custom/timestomping.yml +0 -50
  4441. package/bundled-rules/sigma-rules/custom/tor-connection.yml +0 -75
  4442. package/bundled-rules/sigma-rules/custom/vpn-anomaly.yml +0 -62
  4443. package/bundled-rules/sigma-rules/custom/web-shell-upload.yml +0 -80
  4444. package/bundled-rules/sigma-rules/custom/xss-attempt.yml +0 -55
  4445. package/bundled-rules/yara-rules/.gitkeep +0 -0
  4446. package/bundled-rules/yara-rules/auto-generated/auth-bypass-panguard_auth_bypass_cisa-kev.yar +0 -21
  4447. package/bundled-rules/yara-rules/auto-generated/auth-bypass-panguard_auth_bypass_exploitd.yar +0 -21
  4448. package/bundled-rules/yara-rules/auto-generated/auth-bypass-panguard_auth_bypass_github-a.yar +0 -22
  4449. package/bundled-rules/yara-rules/auto-generated/code-injection-panguard_code_injection_2701701.yar +0 -23
  4450. package/bundled-rules/yara-rules/auto-generated/code-injection-panguard_code_injection_github-a.yar +0 -23
  4451. package/bundled-rules/yara-rules/auto-generated/code-injection-panguard_code_injection_nvd:CVE-.yar +0 -23
  4452. package/bundled-rules/yara-rules/auto-generated/code-injection-panguard_code_injection_nvd_CVE-.yar +0 -23
  4453. package/bundled-rules/yara-rules/auto-generated/command-injection-panguard_command_injection_3456148.yar +0 -21
  4454. package/bundled-rules/yara-rules/auto-generated/command-injection-panguard_command_injection_3584149.yar +0 -21
  4455. package/bundled-rules/yara-rules/auto-generated/command-injection-panguard_command_injection_cisa-kev.yar +0 -21
  4456. package/bundled-rules/yara-rules/auto-generated/command-injection-panguard_command_injection_exploitd.yar +0 -21
  4457. package/bundled-rules/yara-rules/auto-generated/command-injection-panguard_command_injection_github-a.yar +0 -22
  4458. package/bundled-rules/yara-rules/auto-generated/command-injection-panguard_command_injection_nvd:CVE-.yar +0 -22
  4459. package/bundled-rules/yara-rules/auto-generated/command-injection-panguard_command_injection_nvd_CVE-.yar +0 -22
  4460. package/bundled-rules/yara-rules/auto-generated/deserialization-panguard_deserialization_cisa-kev.yar +0 -21
  4461. package/bundled-rules/yara-rules/auto-generated/deserialization-panguard_deserialization_github-a.yar +0 -22
  4462. package/bundled-rules/yara-rules/auto-generated/file-upload-panguard_file_upload_cisa-kev.yar +0 -22
  4463. package/bundled-rules/yara-rules/auto-generated/file-upload-panguard_file_upload_exploitd.yar +0 -22
  4464. package/bundled-rules/yara-rules/auto-generated/file-upload-panguard_file_upload_github-a.yar +0 -23
  4465. package/bundled-rules/yara-rules/auto-generated/file-upload-panguard_file_upload_nvd:CVE-.yar +0 -23
  4466. package/bundled-rules/yara-rules/auto-generated/file-upload-panguard_file_upload_nvd_CVE-.yar +0 -23
  4467. package/bundled-rules/yara-rules/auto-generated/information-disclosure-panguard_information_disclosure_3066548.yar +0 -22
  4468. package/bundled-rules/yara-rules/auto-generated/information-disclosure-panguard_information_disclosure_3360293.yar +0 -22
  4469. package/bundled-rules/yara-rules/auto-generated/information-disclosure-panguard_information_disclosure_3463719.yar +0 -22
  4470. package/bundled-rules/yara-rules/auto-generated/information-disclosure-panguard_information_disclosure_cisa-kev.yar +0 -21
  4471. package/bundled-rules/yara-rules/auto-generated/information-disclosure-panguard_information_disclosure_exploitd.yar +0 -21
  4472. package/bundled-rules/yara-rules/auto-generated/information-disclosure-panguard_information_disclosure_github-a.yar +0 -22
  4473. package/bundled-rules/yara-rules/auto-generated/information-disclosure-panguard_information_disclosure_nvd:CVE-.yar +0 -22
  4474. package/bundled-rules/yara-rules/auto-generated/information-disclosure-panguard_information_disclosure_nvd_CVE-.yar +0 -22
  4475. package/bundled-rules/yara-rules/auto-generated/path-traversal-panguard_path_traversal_cisa-kev.yar +0 -22
  4476. package/bundled-rules/yara-rules/auto-generated/path-traversal-panguard_path_traversal_exploitd.yar +0 -22
  4477. package/bundled-rules/yara-rules/auto-generated/path-traversal-panguard_path_traversal_github-a.yar +0 -23
  4478. package/bundled-rules/yara-rules/auto-generated/sqli-panguard_sqli_3277276.yar +0 -23
  4479. package/bundled-rules/yara-rules/auto-generated/sqli-panguard_sqli_3293803.yar +0 -23
  4480. package/bundled-rules/yara-rules/auto-generated/sqli-panguard_sqli_cisa-kev.yar +0 -22
  4481. package/bundled-rules/yara-rules/auto-generated/sqli-panguard_sqli_exploitd.yar +0 -22
  4482. package/bundled-rules/yara-rules/auto-generated/sqli-panguard_sqli_github-a.yar +0 -23
  4483. package/bundled-rules/yara-rules/auto-generated/ssrf-panguard_ssrf_cisa-kev.yar +0 -22
  4484. package/bundled-rules/yara-rules/auto-generated/ssrf-panguard_ssrf_exploitd.yar +0 -22
  4485. package/bundled-rules/yara-rules/auto-generated/ssrf-panguard_ssrf_github-a.yar +0 -23
  4486. package/bundled-rules/yara-rules/auto-generated/xss-panguard_xss_3424998.yar +0 -22
  4487. package/bundled-rules/yara-rules/auto-generated/xss-panguard_xss_3447021.yar +0 -22
  4488. package/bundled-rules/yara-rules/auto-generated/xss-panguard_xss_cisa-kev.yar +0 -22
  4489. package/bundled-rules/yara-rules/auto-generated/xss-panguard_xss_exploitd.yar +0 -22
  4490. package/bundled-rules/yara-rules/auto-generated/xss-panguard_xss_github-a.yar +0 -23
  4491. package/bundled-rules/yara-rules/auto-generated/xxe-panguard_xxe_cisa-kev.yar +0 -21
  4492. package/bundled-rules/yara-rules/auto-generated/xxe-panguard_xxe_exploitd.yar +0 -21
  4493. package/bundled-rules/yara-rules/community/VERSION +0 -19
  4494. package/bundled-rules/yara-rules/community/albertzsigovits/backdoor_shamanic.yar +0 -36
  4495. package/bundled-rules/yara-rules/community/albertzsigovits/botnet_gafgyt.yar +0 -19
  4496. package/bundled-rules/yara-rules/community/albertzsigovits/botnet_mirai.yar +0 -23
  4497. package/bundled-rules/yara-rules/community/albertzsigovits/crypter_titancrypt.yar +0 -15
  4498. package/bundled-rules/yara-rules/community/albertzsigovits/debug_dotnet.yar +0 -76
  4499. package/bundled-rules/yara-rules/community/albertzsigovits/debug_lnk.yar +0 -41
  4500. package/bundled-rules/yara-rules/community/albertzsigovits/infostealer_redline.yar +0 -64
  4501. package/bundled-rules/yara-rules/community/albertzsigovits/linux_shdownloader.yar +0 -31
  4502. package/bundled-rules/yara-rules/community/albertzsigovits/loader_cruloader.yar +0 -48
  4503. package/bundled-rules/yara-rules/community/albertzsigovits/msil_tinydownloader.yar +0 -124
  4504. package/bundled-rules/yara-rules/community/albertzsigovits/pe_signed.yar +0 -17
  4505. package/bundled-rules/yara-rules/community/albertzsigovits/programlangs.yar +0 -137
  4506. package/bundled-rules/yara-rules/community/albertzsigovits/ransomware_blackbasta.yar +0 -42
  4507. package/bundled-rules/yara-rules/community/albertzsigovits/ransomware_blackcocaine.yar +0 -21
  4508. package/bundled-rules/yara-rules/community/albertzsigovits/ransomware_cl0p.yar +0 -46
  4509. package/bundled-rules/yara-rules/community/albertzsigovits/ransomware_darkbit.yar +0 -127
  4510. package/bundled-rules/yara-rules/community/albertzsigovits/ransomware_esxiargs.yar +0 -41
  4511. package/bundled-rules/yara-rules/community/albertzsigovits/ransomware_kangaroo.yar +0 -51
  4512. package/bundled-rules/yara-rules/community/albertzsigovits/ransomware_royal.yar +0 -28
  4513. package/bundled-rules/yara-rules/community/albertzsigovits/rat_rokrat.yar +0 -46
  4514. package/bundled-rules/yara-rules/community/albertzsigovits/rat_toxiceye.yar +0 -206
  4515. package/bundled-rules/yara-rules/community/albertzsigovits/trojan_fakepdf.yar +0 -23
  4516. package/bundled-rules/yara-rules/community/baderj/agent_tesla.yar +0 -36
  4517. package/bundled-rules/yara-rules/community/baderj/amadey.yar +0 -27
  4518. package/bundled-rules/yara-rules/community/baderj/async_rat.yar +0 -39
  4519. package/bundled-rules/yara-rules/community/baderj/aurora_stealer.yar +0 -77
  4520. package/bundled-rules/yara-rules/community/baderj/danabot.yar +0 -25
  4521. package/bundled-rules/yara-rules/community/baderj/discord_pws.yar +0 -27
  4522. package/bundled-rules/yara-rules/community/baderj/erbium_stealer.yar +0 -27
  4523. package/bundled-rules/yara-rules/community/baderj/ffdroider.yar +0 -49
  4524. package/bundled-rules/yara-rules/community/baderj/gcleaner.yar +0 -45
  4525. package/bundled-rules/yara-rules/community/baderj/imminent_rat.yar +0 -50
  4526. package/bundled-rules/yara-rules/community/baderj/laplas_clipper.yar +0 -55
  4527. package/bundled-rules/yara-rules/community/baderj/lime_rat.yar +0 -21
  4528. package/bundled-rules/yara-rules/community/baderj/lu0bot_loader.yar +0 -53
  4529. package/bundled-rules/yara-rules/community/baderj/matiex_keylogger.yar +0 -106
  4530. package/bundled-rules/yara-rules/community/baderj/modern_loader.yar +0 -58
  4531. package/bundled-rules/yara-rules/community/baderj/neshta.yar +0 -16
  4532. package/bundled-rules/yara-rules/community/baderj/nj_rat.yar +0 -133
  4533. package/bundled-rules/yara-rules/community/baderj/origin_logger.yar +0 -90
  4534. package/bundled-rules/yara-rules/community/baderj/phorpiex.yar +0 -69
  4535. package/bundled-rules/yara-rules/community/baderj/quasar_rat.yar +0 -91
  4536. package/bundled-rules/yara-rules/community/baderj/rekoobe.yar +0 -41
  4537. package/bundled-rules/yara-rules/community/baderj/shai-hulud.yar +0 -37
  4538. package/bundled-rules/yara-rules/community/baderj/vidar.yar +0 -52
  4539. package/bundled-rules/yara-rules/community/baderj/win_bitcoin_genesis_b9.yara +0 -49
  4540. package/bundled-rules/yara-rules/community/baderj/ws_rat.yar +0 -28
  4541. package/bundled-rules/yara-rules/community/baderj/xfiles_loader.yar +0 -40
  4542. package/bundled-rules/yara-rules/community/baderj/xworm.yar +0 -53
  4543. package/bundled-rules/yara-rules/community/barrosleo/forensics_rule1.yar +0 -16
  4544. package/bundled-rules/yara-rules/community/barrosleo/malware_rule1.yar +0 -16
  4545. package/bundled-rules/yara-rules/community/barrosleo/malware_rule2.yar +0 -16
  4546. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/Autumn_Backdoor.yar +0 -36
  4547. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/Autumn_Backdoor_Loader.yar +0 -27
  4548. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/Confucius_B.yar +0 -28
  4549. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/Cotx_RAT.yar +0 -56
  4550. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/EE_Dropper.yar +0 -30
  4551. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/EE_Loader.yar +0 -33
  4552. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/NikiCert.yar +0 -26
  4553. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/NikiGo.yar +0 -36
  4554. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/NikiHTTP.yar +0 -37
  4555. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/RokRAT.yar +0 -41
  4556. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/RoyalRoad_RTF.yar +0 -28
  4557. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/StormDNS.yar +0 -36
  4558. package/bundled-rules/yara-rules/community/bartblaze/rules/APT/Unk_Mythic_Loader.yar +0 -37
  4559. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Andromeda.yar +0 -41
  4560. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/ArechClient.yar +0 -27
  4561. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/ArechClient_Campaign_July2021.yar +0 -25
  4562. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/AuroraStealer.yar +0 -58
  4563. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/AveMaria.yar +0 -31
  4564. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/BazarBackdoor.yar +0 -28
  4565. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/BazarLoader.yar +0 -32
  4566. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/BroEx.yar +0 -50
  4567. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/CrunchyRoll.yar +0 -25
  4568. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Ganelp.yar +0 -39
  4569. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/IcedID.yar +0 -64
  4570. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/JSSLoader.yar +0 -37
  4571. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Jupyter.yar +0 -27
  4572. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/KeyBase.yar +0 -37
  4573. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/LNKR.yar +0 -162
  4574. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Monero_Compromise.yar +0 -27
  4575. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/OfflRouter.yar +0 -29
  4576. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Oyster.yar +0 -34
  4577. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Parallax.yar +0 -32
  4578. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Prometei.yar +0 -103
  4579. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Pulsar_RAT.yar +0 -29
  4580. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/PureZip.yar +0 -26
  4581. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/PurpleFox.yar +0 -106
  4582. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/RedLine.yar +0 -165
  4583. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/RedLine_Campaign_June2021.yar +0 -25
  4584. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/SaintBot.yar +0 -27
  4585. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/ShinnyShield.yar +0 -42
  4586. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/SystemBC.yar +0 -62
  4587. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Unk_BR_Banker.yar +0 -38
  4588. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Unk_Crime_Downloader_1.yar +0 -29
  4589. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Unk_Crime_Downloader_2.yar +0 -31
  4590. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/Unk_DesktopLoader.yar +0 -29
  4591. package/bundled-rules/yara-rules/community/bartblaze/rules/crimeware/ZLoader.yar +0 -46
  4592. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/AutoIT.yar +0 -60
  4593. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/Costura_Protobuf.yar +0 -25
  4594. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/DotNet_Reactor.yar +0 -38
  4595. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/EnigmaStub.yar +0 -30
  4596. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/Generic_Phishing_PDF.yar +0 -26
  4597. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/GrimResource.yar +0 -29
  4598. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/Hidden.yar +0 -32
  4599. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/IEuser_author_doc.yar +0 -25
  4600. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/ISO_exec.yar +0 -24
  4601. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/LNK_Ruleset.yar +0 -465
  4602. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/MalScript_Tricks.yar +0 -25
  4603. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/MiniTor.yar +0 -38
  4604. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/OLEfile_in_CAD_FAS_LSP.yar +0 -30
  4605. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/OneNote_BuildPath.yar +0 -24
  4606. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/PyInstaller.yar +0 -27
  4607. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/Rclone.yar +0 -31
  4608. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/Specialist_Repack_Doc.yar +0 -24
  4609. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/VMProtectStub.yar +0 -31
  4610. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/Webshell_in_image.yar +0 -35
  4611. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/WinRAR_ADS_Traversal.yar +0 -31
  4612. package/bundled-rules/yara-rules/community/bartblaze/rules/generic/oAuth_Phishing_PDF.yar +0 -26
  4613. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/Adaptix_Beacon.yar +0 -51
  4614. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/Adfind.yar +0 -31
  4615. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/CreateMiniDump.yar +0 -35
  4616. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/DefenderControl.yar +0 -29
  4617. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/Extract_MachineKey_SharePoint.yar +0 -51
  4618. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/GhostShell_SharePoint.yar +0 -39
  4619. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/Gmer.yar +0 -28
  4620. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/Gmer_Driver.yar +0 -27
  4621. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/HiddenVNC.yar +0 -29
  4622. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/IISRaid.yar +0 -31
  4623. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/IIS_Backdoor.yar +0 -35
  4624. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/Impacket.yar +0 -43
  4625. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/KPortScan.yar +0 -35
  4626. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/LaZagne.yar +0 -30
  4627. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/Mythic.yar +0 -165
  4628. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/NLBrute.yar +0 -23
  4629. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/Orca.yar +0 -64
  4630. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/PowerTool.yar +0 -33
  4631. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/RDPWrap.yar +0 -29
  4632. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/Responder.yar +0 -39
  4633. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/SharpAdidnsdump.yar +0 -39
  4634. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/SharpHostInfo.yar +0 -36
  4635. package/bundled-rules/yara-rules/community/bartblaze/rules/hacktools/Windows_Credentials_Editor.yar +0 -46
  4636. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/Avaddon.yar +0 -36
  4637. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/BlackKingDom.yar +0 -35
  4638. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/CryLock.yar +0 -33
  4639. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/Darkside.yar +0 -27
  4640. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/DearCry.yar +0 -35
  4641. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/Ekans.yar +0 -28
  4642. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/Fusion.yar +0 -35
  4643. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/Maze.yar +0 -40
  4644. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/Pysa.yar +0 -30
  4645. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/REvil_Cert.yar +0 -26
  4646. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/REvil_Dropper.yar +0 -41
  4647. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/RagnarLocker.yar +0 -27
  4648. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/Satan_Mutexes.yar +0 -34
  4649. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/Sfile.yar +0 -42
  4650. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/Warlock.yar +0 -35
  4651. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/WhiteBlack.yar +0 -26
  4652. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/WickrMe.yar +0 -35
  4653. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/WinLock.yar +0 -38
  4654. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/XiaoBa.yar +0 -28
  4655. package/bundled-rules/yara-rules/community/bartblaze/rules/ransomware/Zeppelin.yar +0 -33
  4656. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Artifact32_and_Resources_Dropper_v1_45_to_v4_x.yara +0 -89
  4657. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Artifact32svc_Exe_v1_49_to_v4_x.yara +0 -77
  4658. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Artifact64_v1_49_to_v4_x.yara +0 -128
  4659. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Beacon_Dll_All_Versions_MemEnabled.yara +0 -1665
  4660. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Bind64_Bin_v2_5_through_v4_x.yara +0 -109
  4661. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Bind_Bin_v2_5_through_v4_x.yara +0 -111
  4662. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Browserpivot_Bin_v1_48_to_v3_14_and_Sleeve_Browserpivot_Dll_v4_0_to_v4_x.yara +0 -60
  4663. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Browserpivot_x64_Bin_v1_48_to_v3_14_and_Sleeve_Browserpivot_x64_Dll_v4_0_to_v4_x.yara +0 -64
  4664. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Bypassuac_Dll_v1_49_to_v3_14_and_Sleeve_Bypassuac_Dll_v4_0_to_v4_x.yara +0 -94
  4665. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Bypassuac_x64_Dll_v3_3_to_v3_14_and_Sleeve_Bypassuac_x64_Dll_v4_0_and_v4_x.yara +0 -86
  4666. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Bypassuactoken_Dll_v3_11_to_v3_14.yara +0 -151
  4667. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Bypassuactoken_x64_Dll_v3_11_to_v3_14.yara +0 -118
  4668. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Command_Ps1_v2_5_to_v3_7_and_Resources_Compress_Ps1_v3_8_to_v4_x.yara +0 -33
  4669. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Covertvpn_Dll_v2_1_to_v4_x.yara +0 -120
  4670. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Covertvpn_injector_Exe_v1_44_to_v2_0_49.yara +0 -116
  4671. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Dnsstager_Bin_v1_47_through_v4_x.yara +0 -78
  4672. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Elevate_Dll_v3_0_to_v3_14_and_Sleeve_Elevate_Dll_v4_x.yara +0 -68
  4673. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Elevate_X64_Dll_v3_0_to_v3_14_and_Sleeve_Elevate_X64_Dll_v4_x.yara +0 -71
  4674. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Httpsstager64_Bin_v3_2_through_v4_x.yara +0 -90
  4675. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Httpsstager_Bin_v2_5_through_v4_x.yara +0 -95
  4676. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Httpstager64_Bin_v3_2_through_v4_x.yara +0 -85
  4677. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Httpstager_Bin_v2_5_through_v4_x.yara +0 -93
  4678. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Reverse64_Bin_v2_5_through_v4_x.yara +0 -99
  4679. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Reverse_Bin_v2_5_through_v4_x.yara +0 -104
  4680. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Smbstager_Bin_v2_5_through_v4_x.yara +0 -95
  4681. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Template_Py_v3_3_to_v4_x.yara +0 -36
  4682. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Template_Sct_v3_3_to_v4_x.yara +0 -38
  4683. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Template_Vbs_v3_3_to_v4_x.yara +0 -41
  4684. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Template__x32_x64_Ps1_v1_45_to_v2_5_and_v3_11_to_v3_14.yara +0 -43
  4685. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Template_x64_Ps1_v3_0_to_v4_x_excluding_3_12_3_13.yara +0 -37
  4686. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Template_x86_Vba_v3_8_to_v4_x.yara +0 -37
  4687. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Xor_Bin__32bit_v2_x_to_4_x.yara +0 -38
  4688. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Resources_Xor_Bin__64bit_v3_12_to_4_x.yara +0 -39
  4689. package/bundled-rules/yara-rules/community/chronicle/YARA/CobaltStrike/CobaltStrike__Sleeve_BeaconLoader_all.yara +0 -555
  4690. package/bundled-rules/yara-rules/community/chronicle/YARA/Sliver/Sliver__Implant_32bit.yara +0 -81
  4691. package/bundled-rules/yara-rules/community/chronicle/YARA/Sliver/Sliver__Implant_64bit.yara +0 -84
  4692. package/bundled-rules/yara-rules/community/ditekshen/yara/indicator_knownbad_certs.yar +0 -9004
  4693. package/bundled-rules/yara-rules/community/ditekshen/yara/indicator_knownbad_id.yar +0 -1739
  4694. package/bundled-rules/yara-rules/community/ditekshen/yara/indicator_office.yar +0 -953
  4695. package/bundled-rules/yara-rules/community/ditekshen/yara/indicator_packed.yar +0 -804
  4696. package/bundled-rules/yara-rules/community/ditekshen/yara/indicator_rmm.yar +0 -580
  4697. package/bundled-rules/yara-rules/community/ditekshen/yara/indicator_suspicious.yar +0 -2633
  4698. package/bundled-rules/yara-rules/community/ditekshen/yara/indicator_tools.yar +0 -1908
  4699. package/bundled-rules/yara-rules/community/ditekshen/yara/malware.yar +0 -11957
  4700. package/bundled-rules/yara-rules/community/eset/animalfarm/animalfarm.yar +0 -96
  4701. package/bundled-rules/yara-rules/community/eset/badiis/badiis.yar +0 -552
  4702. package/bundled-rules/yara-rules/community/eset/groundbait/prikormka.yar +0 -141
  4703. package/bundled-rules/yara-rules/community/eset/invisimole/invisimole.yar +0 -297
  4704. package/bundled-rules/yara-rules/community/eset/keydnap/keydnap.yar +0 -86
  4705. package/bundled-rules/yara-rules/community/eset/kobalos/kobalos.yar +0 -73
  4706. package/bundled-rules/yara-rules/community/eset/moose/linux-moose.yar +0 -110
  4707. package/bundled-rules/yara-rules/community/eset/mozi/mozi.yar +0 -51
  4708. package/bundled-rules/yara-rules/community/eset/mumblehard/mumblehard_packer.yar +0 -47
  4709. package/bundled-rules/yara-rules/community/eset/nukesped_lazarus/rich_headers_IconicPayloads_3CX.yar +0 -23
  4710. package/bundled-rules/yara-rules/community/eset/potao/PotaoNew.yara +0 -108
  4711. package/bundled-rules/yara-rules/community/eset/rakos/rakos.yar +0 -53
  4712. package/bundled-rules/yara-rules/community/eset/redline/redline.yar +0 -172
  4713. package/bundled-rules/yara-rules/community/eset/sparklinggoblin/SparklingGoblin.yar +0 -489
  4714. package/bundled-rules/yara-rules/community/eset/sshdoor/sshdoor.yar +0 -572
  4715. package/bundled-rules/yara-rules/community/eset/stantinko/stantinko.yar +0 -255
  4716. package/bundled-rules/yara-rules/community/eset/ta410/ta410.yar +0 -741
  4717. package/bundled-rules/yara-rules/community/eset/turla/carbon.yar +0 -69
  4718. package/bundled-rules/yara-rules/community/eset/turla/gazer.yar +0 -85
  4719. package/bundled-rules/yara-rules/community/eset/turla/turla-outlook.yar +0 -169
  4720. package/bundled-rules/yara-rules/community/eset/windigo/ebury.yar +0 -97
  4721. package/bundled-rules/yara-rules/community/eset/windigo/helimod.yar +0 -105
  4722. package/bundled-rules/yara-rules/community/eset/windigo/windigo-onimiki.yar +0 -59
  4723. package/bundled-rules/yara-rules/community/eset/winnti_group/skip20_sqllang_hook.yar +0 -69
  4724. package/bundled-rules/yara-rules/community/intezer/APT15.yar +0 -48
  4725. package/bundled-rules/yara-rules/community/intezer/AgeLocker.yar +0 -19
  4726. package/bundled-rules/yara-rules/community/intezer/ChinaZ_Managers.yar +0 -60
  4727. package/bundled-rules/yara-rules/community/intezer/DarkComet.yar +0 -262
  4728. package/bundled-rules/yara-rules/community/intezer/Doki_Attack.yar +0 -17
  4729. package/bundled-rules/yara-rules/community/intezer/EvilGnome.yar +0 -49
  4730. package/bundled-rules/yara-rules/community/intezer/Gh0stRAT.yar +0 -37
  4731. package/bundled-rules/yara-rules/community/intezer/GreedyAntd.yar +0 -13
  4732. package/bundled-rules/yara-rules/community/intezer/HiddenWasp.yar +0 -44
  4733. package/bundled-rules/yara-rules/community/intezer/IPStorm.yar +0 -18
  4734. package/bundled-rules/yara-rules/community/intezer/Iranian_Wipers.yar +0 -111
  4735. package/bundled-rules/yara-rules/community/intezer/Lazarus_2020.yar +0 -32
  4736. package/bundled-rules/yara-rules/community/intezer/NexePirateSteal.yar +0 -13
  4737. package/bundled-rules/yara-rules/community/intezer/QNAPCrypt.yar +0 -19
  4738. package/bundled-rules/yara-rules/community/intezer/RedDelta.yar +0 -59
  4739. package/bundled-rules/yara-rules/community/intezer/Rekoobe.yar +0 -16
  4740. package/bundled-rules/yara-rules/community/intezer/RussianAPT.yar +0 -7634
  4741. package/bundled-rules/yara-rules/community/intezer/Trickbot.yar +0 -184
  4742. package/bundled-rules/yara-rules/community/intezer/WatchBog.yar +0 -25
  4743. package/bundled-rules/yara-rules/community/intezer/xe_group.yar +0 -168
  4744. package/bundled-rules/yara-rules/community/jpcert/APT10/apt10.yara +0 -254
  4745. package/bundled-rules/yara-rules/community/jpcert/APT29/apt29.yara +0 -87
  4746. package/bundled-rules/yara-rules/community/jpcert/BlackTech/blacktech.yara +0 -495
  4747. package/bundled-rules/yara-rules/community/jpcert/Darkhotel/darkhotel.yara +0 -88
  4748. package/bundled-rules/yara-rules/community/jpcert/DragonOK/dragonok.yara +0 -28
  4749. package/bundled-rules/yara-rules/community/jpcert/Kimsuky/Kimsuky.yara +0 -130
  4750. package/bundled-rules/yara-rules/community/jpcert/Lazarus/applejeus.yara +0 -34
  4751. package/bundled-rules/yara-rules/community/jpcert/Lazarus/contagiousinterview.yara +0 -34
  4752. package/bundled-rules/yara-rules/community/jpcert/Lazarus/crypthunter.yara +0 -349
  4753. package/bundled-rules/yara-rules/community/jpcert/Lazarus/lazarus.yara +0 -705
  4754. package/bundled-rules/yara-rules/community/jpcert/Tick/tick.yara +0 -323
  4755. package/bundled-rules/yara-rules/community/jpcert/UNC5174/unc5174.yara +0 -38
  4756. package/bundled-rules/yara-rules/community/jpcert/other/3proxy.yara +0 -15
  4757. package/bundled-rules/yara-rules/community/jpcert/other/Atlas.yara +0 -42
  4758. package/bundled-rules/yara-rules/community/jpcert/other/IcedID.yara +0 -20
  4759. package/bundled-rules/yara-rules/community/jpcert/other/MedusaLocker.yara +0 -17
  4760. package/bundled-rules/yara-rules/community/jpcert/other/Remcos.yara +0 -16
  4761. package/bundled-rules/yara-rules/community/jpcert/other/RestyLink.yara +0 -107
  4762. package/bundled-rules/yara-rules/community/jpcert/other/StealthWorker.yara +0 -14
  4763. package/bundled-rules/yara-rules/community/jpcert/other/TokyoX.yara +0 -28
  4764. package/bundled-rules/yara-rules/community/jpcert/other/Voldemort.yara +0 -50
  4765. package/bundled-rules/yara-rules/community/jpcert/other/adminer.yara +0 -19
  4766. package/bundled-rules/yara-rules/community/jpcert/other/agenttesla.yara +0 -33
  4767. package/bundled-rules/yara-rules/community/jpcert/other/antiupx.yara +0 -45
  4768. package/bundled-rules/yara-rules/community/jpcert/other/ares.yara +0 -25
  4769. package/bundled-rules/yara-rules/community/jpcert/other/asyncrat.yara +0 -20
  4770. package/bundled-rules/yara-rules/community/jpcert/other/azorult.yara +0 -15
  4771. package/bundled-rules/yara-rules/community/jpcert/other/b374k.yara +0 -18
  4772. package/bundled-rules/yara-rules/community/jpcert/other/bebloh.yara +0 -16
  4773. package/bundled-rules/yara-rules/community/jpcert/other/brc4.yara +0 -19
  4774. package/bundled-rules/yara-rules/community/jpcert/other/cobaltstrike.yara +0 -33
  4775. package/bundled-rules/yara-rules/community/jpcert/other/cve202120837.yara +0 -33
  4776. package/bundled-rules/yara-rules/community/jpcert/other/darkcloud.yara +0 -18
  4777. package/bundled-rules/yara-rules/community/jpcert/other/donut.yara +0 -20
  4778. package/bundled-rules/yara-rules/community/jpcert/other/doplugs.yara +0 -55
  4779. package/bundled-rules/yara-rules/community/jpcert/other/doraemon.yara +0 -32
  4780. package/bundled-rules/yara-rules/community/jpcert/other/dtsft.yara +0 -53
  4781. package/bundled-rules/yara-rules/community/jpcert/other/emotet.yara +0 -18
  4782. package/bundled-rules/yara-rules/community/jpcert/other/filesman.yara +0 -27
  4783. package/bundled-rules/yara-rules/community/jpcert/other/flubot.yara +0 -18
  4784. package/bundled-rules/yara-rules/community/jpcert/other/formbook.yara +0 -15
  4785. package/bundled-rules/yara-rules/community/jpcert/other/fortinet.yara +0 -59
  4786. package/bundled-rules/yara-rules/community/jpcert/other/foxwso.yara +0 -14
  4787. package/bundled-rules/yara-rules/community/jpcert/other/getrdoor.yara +0 -19
  4788. package/bundled-rules/yara-rules/community/jpcert/other/gobrat.yara +0 -185
  4789. package/bundled-rules/yara-rules/community/jpcert/other/hawkeye.yara +0 -15
  4790. package/bundled-rules/yara-rules/community/jpcert/other/huiloader.yara +0 -25
  4791. package/bundled-rules/yara-rules/community/jpcert/other/inetget.yara +0 -30
  4792. package/bundled-rules/yara-rules/community/jpcert/other/ivanti_connect_secure.yara +0 -16
  4793. package/bundled-rules/yara-rules/community/jpcert/other/lodeinfo.yara +0 -558
  4794. package/bundled-rules/yara-rules/community/jpcert/other/lokibot.yara +0 -16
  4795. package/bundled-rules/yara-rules/community/jpcert/other/machOdownloader.yara +0 -47
  4796. package/bundled-rules/yara-rules/community/jpcert/other/maldocinpdf.yara +0 -20
  4797. package/bundled-rules/yara-rules/community/jpcert/other/nanocore.yara +0 -15
  4798. package/bundled-rules/yara-rules/community/jpcert/other/netwire.yara +0 -18
  4799. package/bundled-rules/yara-rules/community/jpcert/other/nimfilecoder.yara +0 -51
  4800. package/bundled-rules/yara-rules/community/jpcert/other/njrat.yara +0 -14
  4801. package/bundled-rules/yara-rules/community/jpcert/other/noderat.yara +0 -15
  4802. package/bundled-rules/yara-rules/community/jpcert/other/pangolin8rat.yara +0 -95
  4803. package/bundled-rules/yara-rules/community/jpcert/other/phantomstealer.yara +0 -17
  4804. package/bundled-rules/yara-rules/community/jpcert/other/phpfilemanager.yara +0 -16
  4805. package/bundled-rules/yara-rules/community/jpcert/other/phpmal.yara +0 -71
  4806. package/bundled-rules/yara-rules/community/jpcert/other/plugx.yara +0 -25
  4807. package/bundled-rules/yara-rules/community/jpcert/other/poisonivy.yara +0 -15
  4808. package/bundled-rules/yara-rules/community/jpcert/other/poohlydown.yara +0 -13
  4809. package/bundled-rules/yara-rules/community/jpcert/other/pskiller_sys.yara +0 -130
  4810. package/bundled-rules/yara-rules/community/jpcert/other/pulsesecure.yara +0 -31
  4811. package/bundled-rules/yara-rules/community/jpcert/other/qbot.yara +0 -21
  4812. package/bundled-rules/yara-rules/community/jpcert/other/quasar.yara +0 -21
  4813. package/bundled-rules/yara-rules/community/jpcert/other/seaspy.yara +0 -28
  4814. package/bundled-rules/yara-rules/community/jpcert/other/shellcode.yara +0 -124
  4815. package/bundled-rules/yara-rules/community/jpcert/other/smokeloader.yara +0 -15
  4816. package/bundled-rules/yara-rules/community/jpcert/other/snakekeylogger.yara +0 -16
  4817. package/bundled-rules/yara-rules/community/jpcert/other/spygrace.yara +0 -35
  4818. package/bundled-rules/yara-rules/community/jpcert/other/sqroot.yara +0 -206
  4819. package/bundled-rules/yara-rules/community/jpcert/other/stealc.yara +0 -32
  4820. package/bundled-rules/yara-rules/community/jpcert/other/steelclover.yara +0 -36
  4821. package/bundled-rules/yara-rules/community/jpcert/other/stonemite.yara +0 -16
  4822. package/bundled-rules/yara-rules/community/jpcert/other/sysrvbot.yara +0 -61
  4823. package/bundled-rules/yara-rules/community/jpcert/other/tool.yara +0 -22
  4824. package/bundled-rules/yara-rules/community/jpcert/other/ursnif.yara +0 -32
  4825. package/bundled-rules/yara-rules/community/jpcert/other/vboxuserrat.yara +0 -51
  4826. package/bundled-rules/yara-rules/community/jpcert/other/veletrix.yara +0 -43
  4827. package/bundled-rules/yara-rules/community/jpcert/other/waterpamola.yara +0 -131
  4828. package/bundled-rules/yara-rules/community/jpcert/other/webrcs.yara +0 -47
  4829. package/bundled-rules/yara-rules/community/jpcert/other/webview2loader.yara +0 -32
  4830. package/bundled-rules/yara-rules/community/jpcert/other/windealer.yara +0 -42
  4831. package/bundled-rules/yara-rules/community/loldrivers/detections/yara/other/yara-rules_mal_drivers_strict.yar +0 -855
  4832. package/bundled-rules/yara-rules/community/loldrivers/detections/yara/other/yara-rules_vuln_drivers.yar +0 -12131
  4833. package/bundled-rules/yara-rules/community/loldrivers/detections/yara/other/yara-rules_vuln_drivers_strict_renamed.yar +0 -12131
  4834. package/bundled-rules/yara-rules/community/loldrivers/detections/yara/yara-rules_mal_drivers.yar +0 -855
  4835. package/bundled-rules/yara-rules/community/loldrivers/detections/yara/yara-rules_vuln_drivers_strict.yar +0 -12131
  4836. package/bundled-rules/yara-rules/community/mandiant/all-yara.yar +0 -2947
  4837. package/bundled-rules/yara-rules/community/mandiant/rules/ADPASSHUNT/production/yara/APT_HackTool_MSIL_ADPassHunt_1.yar +0 -17
  4838. package/bundled-rules/yara-rules/community/mandiant/rules/ADPASSHUNT/production/yara/APT_HackTool_MSIL_ADPassHunt_2.yar +0 -23
  4839. package/bundled-rules/yara-rules/community/mandiant/rules/ADPASSHUNT/production/yara/CredTheft_MSIL_ADPassHunt_1.yar +0 -15
  4840. package/bundled-rules/yara-rules/community/mandiant/rules/ADPASSHUNT/production/yara/CredTheft_MSIL_ADPassHunt_2.yar +0 -19
  4841. package/bundled-rules/yara-rules/community/mandiant/rules/ALLTHETHINGS/production/yara/Loader_MSIL_AllTheThings_1.yar +0 -15
  4842. package/bundled-rules/yara-rules/community/mandiant/rules/BASICPIPESHELL/production/yara/APT_Backdoor_PS1_BASICPIPESHELL_1.yar +0 -18
  4843. package/bundled-rules/yara-rules/community/mandiant/rules/BEACON/supplemental/yara/Loader_Win_Generic_17.yar +0 -19
  4844. package/bundled-rules/yara-rules/community/mandiant/rules/BEACON/supplemental/yara/Loader_Win_Generic_18.yar +0 -19
  4845. package/bundled-rules/yara-rules/community/mandiant/rules/BEACON/supplemental/yara/Trojan_Raw_Generic_4.yar +0 -17
  4846. package/bundled-rules/yara-rules/community/mandiant/rules/BEACON/supplemental/yara/Trojan_Win_Generic_101.yar +0 -20
  4847. package/bundled-rules/yara-rules/community/mandiant/rules/BELTALOWDA/production/yara/HackTool_MSIL_SEATBELT_1.yar +0 -25
  4848. package/bundled-rules/yara-rules/community/mandiant/rules/BELTALOWDA/production/yara/HackTool_MSIL_SEATBELT_2.yar +0 -15
  4849. package/bundled-rules/yara-rules/community/mandiant/rules/COREHOUND/production/yara/HackTool_MSIL_CoreHound_1.yar +0 -15
  4850. package/bundled-rules/yara-rules/community/mandiant/rules/DSHELL/production/yara/APT_Backdoor_Win_DShell_1.yar +0 -191
  4851. package/bundled-rules/yara-rules/community/mandiant/rules/DSHELL/production/yara/APT_Backdoor_Win_DShell_3.yar +0 -90
  4852. package/bundled-rules/yara-rules/community/mandiant/rules/DSHELL/production/yara/APT_Loader_Win32_DShell_1.yar +0 -20
  4853. package/bundled-rules/yara-rules/community/mandiant/rules/DSHELL/production/yara/APT_Loader_Win32_DShell_2.yar +0 -21
  4854. package/bundled-rules/yara-rules/community/mandiant/rules/DSHELL/production/yara/APT_Loader_Win32_DShell_3.yar +0 -19
  4855. package/bundled-rules/yara-rules/community/mandiant/rules/DSHELL/supplemental/yara/APT_Backdoor_Win_DShell_2.yar +0 -132
  4856. package/bundled-rules/yara-rules/community/mandiant/rules/DTRIM/production/yara/APT_HackTool_MSIL_DTRIM_1.yar +0 -15
  4857. package/bundled-rules/yara-rules/community/mandiant/rules/DUEDLLIGENCE/production/yara/HackTool_MSIL_HOLSTER_1.yar +0 -15
  4858. package/bundled-rules/yara-rules/community/mandiant/rules/DUEDLLIGENCE/production/yara/Loader_MSIL_DUEDLLIGENCE_1.yar +0 -15
  4859. package/bundled-rules/yara-rules/community/mandiant/rules/DUEDLLIGENCE/production/yara/Loader_MSIL_DUEDLLIGENCE_2.yar +0 -15
  4860. package/bundled-rules/yara-rules/community/mandiant/rules/DUEDLLIGENCE/production/yara/Loader_MSIL_DUEDLLIGENCE_3.yar +0 -16
  4861. package/bundled-rules/yara-rules/community/mandiant/rules/DUEDLLIGENCE/production/yara/MSIL_Launcher_DUEDLLIGENCE_1.yar +0 -15
  4862. package/bundled-rules/yara-rules/community/mandiant/rules/EXCAVATOR/production/yara/APT_HackTool_Win64_EXCAVATOR_1.yar +0 -19
  4863. package/bundled-rules/yara-rules/community/mandiant/rules/EXCAVATOR/production/yara/APT_HackTool_Win64_EXCAVATOR_2.yar +0 -19
  4864. package/bundled-rules/yara-rules/community/mandiant/rules/EXCAVATOR/production/yara/CredTheft_Win_EXCAVATOR_1.yar +0 -18
  4865. package/bundled-rules/yara-rules/community/mandiant/rules/EXCAVATOR/production/yara/CredTheft_Win_EXCAVATOR_2.yar +0 -18
  4866. package/bundled-rules/yara-rules/community/mandiant/rules/EXCAVATOR/supplemental/yara/Trojan_Win64_Generic_22.yar +0 -22
  4867. package/bundled-rules/yara-rules/community/mandiant/rules/EXCAVATOR/supplemental/yara/Trojan_Win64_Generic_23.yar +0 -22
  4868. package/bundled-rules/yara-rules/community/mandiant/rules/FLUFFY/production/yara/APT_HackTool_MSIL_FLUFFY_1.yar +0 -18
  4869. package/bundled-rules/yara-rules/community/mandiant/rules/FLUFFY/production/yara/APT_HackTool_MSIL_FLUFFY_2.yar +0 -21
  4870. package/bundled-rules/yara-rules/community/mandiant/rules/G2JS/production/yara/Builder_MSIL_G2JS_1.yar +0 -15
  4871. package/bundled-rules/yara-rules/community/mandiant/rules/G2JS/production/yara/Hunting_B64Engine_DotNetToJScript_Dos.yar +0 -15
  4872. package/bundled-rules/yara-rules/community/mandiant/rules/G2JS/production/yara/Hunting_DotNetToJScript_Functions.yar +0 -22
  4873. package/bundled-rules/yara-rules/community/mandiant/rules/G2JS/production/yara/Hunting_GadgetToJScript_1.yar +0 -17
  4874. package/bundled-rules/yara-rules/community/mandiant/rules/GETDOMAINPASSWORDPOLICY/production/yara/HackTool_MSIL_GETDOMAINPASSWORDPOLICY_1.yar +0 -15
  4875. package/bundled-rules/yara-rules/community/mandiant/rules/GPOHUNT/production/yara/APT_HackTool_MSIL_GPOHUNT_1.yar +0 -15
  4876. package/bundled-rules/yara-rules/community/mandiant/rules/IMPACKETOBF (Smbexec)/production/yara/HackTool_PY_ImpacketObfuscation_1.yar +0 -22
  4877. package/bundled-rules/yara-rules/community/mandiant/rules/IMPACKETOBF (Wmiexec)/production/yara/HackTool_PY_ImpacketObfuscation_2.yar +0 -21
  4878. package/bundled-rules/yara-rules/community/mandiant/rules/INVEIGHZERO/production/yara/HackTool_MSIL_INVEIGHZERO_1.yar +0 -15
  4879. package/bundled-rules/yara-rules/community/mandiant/rules/JUSTASK/production/yara/APT_HackTool_MSIL_JUSTASK_1.yar +0 -15
  4880. package/bundled-rules/yara-rules/community/mandiant/rules/KEEFARCE/production/yara/HackTool_MSIL_KeeFarce_1.yar +0 -15
  4881. package/bundled-rules/yara-rules/community/mandiant/rules/KEEPERSIST/production/yara/HackTool_MSIL_KeePersist_1.yar +0 -15
  4882. package/bundled-rules/yara-rules/community/mandiant/rules/LNKSMASHER/production/yara/Dropper_LNK_LNKSmasher_1.yar +0 -18
  4883. package/bundled-rules/yara-rules/community/mandiant/rules/LNKSMASHER/supplemental/yara/Hunting_LNK_Win_GenericLauncher.yar +0 -22
  4884. package/bundled-rules/yara-rules/community/mandiant/rules/LUALOADER/production/yara/APT_HackTool_MSIL_LUALOADER_1.yar +0 -15
  4885. package/bundled-rules/yara-rules/community/mandiant/rules/LUALOADER/production/yara/APT_Loader_MSIL_LUALOADER_1.yar +0 -17
  4886. package/bundled-rules/yara-rules/community/mandiant/rules/LUALOADER/production/yara/APT_Loader_MSIL_LUALOADER_2.yar +0 -19
  4887. package/bundled-rules/yara-rules/community/mandiant/rules/MATRYOSHKA/production/yara/APT_Builder_PY_MATRYOSHKA_1.yar +0 -22
  4888. package/bundled-rules/yara-rules/community/mandiant/rules/MATRYOSHKA/production/yara/APT_Builder_Win64_MATRYOSHKA_1.yar +0 -20
  4889. package/bundled-rules/yara-rules/community/mandiant/rules/MATRYOSHKA/production/yara/APT_Dropper_Win64_MATRYOSHKA_1.yar +0 -18
  4890. package/bundled-rules/yara-rules/community/mandiant/rules/MATRYOSHKA/production/yara/APT_Dropper_Win_MATRYOSHKA_1.yar +0 -20
  4891. package/bundled-rules/yara-rules/community/mandiant/rules/MATRYOSHKA/production/yara/APT_Loader_Win64_MATRYOSHKA_1.yar +0 -19
  4892. package/bundled-rules/yara-rules/community/mandiant/rules/MATRYOSHKA/production/yara/APT_Loader_Win64_MATRYOSHKA_2.yar +0 -20
  4893. package/bundled-rules/yara-rules/community/mandiant/rules/MATRYOSHKA/production/yara/APT_Loader_Win_MATRYOSHKA_1.yar +0 -24
  4894. package/bundled-rules/yara-rules/community/mandiant/rules/MEMCOMP/production/yara/Loader_MSIL_InMemoryCompilation_1.yar +0 -15
  4895. package/bundled-rules/yara-rules/community/mandiant/rules/NETASSEMBLYINJECT/production/yara/Loader_MSIL_NETAssemblyInject_1.yar +0 -17
  4896. package/bundled-rules/yara-rules/community/mandiant/rules/NETSHSHELLCODERUNNER/production/yara/Loader_MSIL_NetshShellCodeRunner_1.yar +0 -15
  4897. package/bundled-rules/yara-rules/community/mandiant/rules/NOAMCI/production/yara/APT_HackTool_MSIL_NOAMCI_1.yar +0 -16
  4898. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_MSIL_PGF_1.yar +0 -17
  4899. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_MSIL_PGF_2.yar +0 -20
  4900. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win32_PGF_1.yar +0 -19
  4901. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win32_PGF_2.yar +0 -19
  4902. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win32_PGF_3.yar +0 -20
  4903. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win32_PGF_4.yar +0 -17
  4904. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win32_PGF_5.yar +0 -18
  4905. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win64_PGF_1.yar +0 -19
  4906. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win64_PGF_2.yar +0 -19
  4907. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win64_PGF_3.yar +0 -18
  4908. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win64_PGF_4.yar +0 -17
  4909. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win64_PGF_5.yar +0 -18
  4910. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win_PGF_1.yar +0 -17
  4911. package/bundled-rules/yara-rules/community/mandiant/rules/PGF/production/yara/APT_Loader_Win_PGF_2.yar +0 -21
  4912. package/bundled-rules/yara-rules/community/mandiant/rules/PREPSHELLCODE/production/yara/HackTool_MSIL_PrepShellcode_1.yar +0 -15
  4913. package/bundled-rules/yara-rules/community/mandiant/rules/PUPPYHOUND/production/yara/HackTool_MSIL_PuppyHound_1.yar +0 -19
  4914. package/bundled-rules/yara-rules/community/mandiant/rules/PUPPYHOUND/production/yara/HackTool_MSIL_SharpHound_3.yar +0 -15
  4915. package/bundled-rules/yara-rules/community/mandiant/rules/PXELOOT/production/yara/HackTool_MSIL_PXELOOT_1.yar +0 -15
  4916. package/bundled-rules/yara-rules/community/mandiant/rules/PXELOOT/production/yara/HackTool_MSIL_PXELOOT_2.yar +0 -27
  4917. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Builder_PY_REDFLARE_1.yar +0 -22
  4918. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Builder_PY_REDFLARE_2.yar +0 -18
  4919. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Controller_Linux_REDFLARE_1.yar +0 -19
  4920. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Downloader_Win32_REDFLARE_1.yar +0 -17
  4921. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Downloader_Win64_REDFLARE_1.yar +0 -17
  4922. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Keylogger_Win32_REDFLARE_1.yar +0 -17
  4923. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Keylogger_Win64_REDFLARE_1.yar +0 -17
  4924. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Loader_Raw32_REDFLARE_1.yar +0 -16
  4925. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Loader_Raw64_REDFLARE_1.yar +0 -16
  4926. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Loader_Win32_REDFLARE_1.yar +0 -17
  4927. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Loader_Win32_REDFLARE_2.yar +0 -17
  4928. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Loader_Win64_REDFLARE_1.yar +0 -17
  4929. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Loader_Win64_REDFLARE_2.yar +0 -18
  4930. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Trojan_Win_REDFLARE_1.yar +0 -21
  4931. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Trojan_Win_REDFLARE_2.yar +0 -20
  4932. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Trojan_Win_REDFLARE_3.yar +0 -19
  4933. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Trojan_Win_REDFLARE_4.yar +0 -19
  4934. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Trojan_Win_REDFLARE_5.yar +0 -20
  4935. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Trojan_Win_REDFLARE_7.yar +0 -21
  4936. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/production/yara/APT_Trojan_Win_REDFLARE_8.yar +0 -22
  4937. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/supplemental/yara/APT_Trojan_Linux_REDFLARE_1.yar +0 -20
  4938. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE/supplemental/yara/APT_Trojan_Win_REDFLARE_6.yar +0 -20
  4939. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE (Gorat)/production/yara/APT_Backdoor_MacOS_GORAT_1.yar +0 -19
  4940. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE (Gorat)/production/yara/APT_Backdoor_Win_GORAT_1.yar +0 -23
  4941. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE (Gorat)/production/yara/APT_Backdoor_Win_GORAT_2.yar +0 -34
  4942. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE (Gorat)/production/yara/APT_Backdoor_Win_GORAT_3.yar +0 -39
  4943. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE (Gorat)/production/yara/APT_Backdoor_Win_GORAT_4.yar +0 -16
  4944. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE (Gorat)/production/yara/APT_Backdoor_Win_GORAT_5.yar +0 -23
  4945. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE (Gorat)/production/yara/APT_Backdoor_Win_GoRat_Memory.yar +0 -27
  4946. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE (Gorat)/production/yara/Trojan_MSIL_GORAT_Module_PowerShell_1.yar +0 -16
  4947. package/bundled-rules/yara-rules/community/mandiant/rules/REDFLARE (Gorat)/production/yara/Trojan_MSIL_GORAT_Plugin_DOTNET_1.yar +0 -16
  4948. package/bundled-rules/yara-rules/community/mandiant/rules/RESUMEPLEASE/production/yara/Trojan_Macro_RESUMEPLEASE_1.yar +0 -21
  4949. package/bundled-rules/yara-rules/community/mandiant/rules/REVOLVER/production/yara/APT_HackTool_MSIL_REVOLVER_1.yar +0 -16
  4950. package/bundled-rules/yara-rules/community/mandiant/rules/REVOLVER/production/yara/APT_Loader_MSIL_REVOLVER_1.yar +0 -14
  4951. package/bundled-rules/yara-rules/community/mandiant/rules/RUBEUS/production/yara/HackTool_MSIL_Rubeus_1.yar +0 -15
  4952. package/bundled-rules/yara-rules/community/mandiant/rules/SAFETYKATZ/production/yara/HackTool_MSIL_SAFETYKATZ_4.yar +0 -15
  4953. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPERSIST/production/yara/HackTool_MSIL_SharPersist_1.yar +0 -15
  4954. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPERSIST/production/yara/HackTool_MSIL_SharPersist_2.yar +0 -23
  4955. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPGENERATOR/production/yara/Builder_MSIL_SharpGenerator_1.yar +0 -15
  4956. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPIVOT/production/yara/HackTool_MSIL_SharPivot_1.yar +0 -18
  4957. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPIVOT/production/yara/HackTool_MSIL_SharPivot_2.yar +0 -20
  4958. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPIVOT/production/yara/HackTool_MSIL_SharPivot_3.yar +0 -31
  4959. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPIVOT/production/yara/HackTool_MSIL_SharPivot_4.yar +0 -15
  4960. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPPGREP/production/yara/Tool_MSIL_SharpGrep_1.yar +0 -15
  4961. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPSACK/production/yara/APT_HackTool_MSIL_SHARPSACK_1.yar +0 -15
  4962. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPSCHTASK/production/yara/HackTool_MSIL_SharpSchtask_1.yar +0 -15
  4963. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPSECTIONINJECTION/production/yara/Loader_MSIL_CSharpSectionInjection_1.yar +0 -15
  4964. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPSTOMP/production/yara/APT_HackTool_MSIL_SHARPSTOMP_1.yar +0 -24
  4965. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPSTOMP/production/yara/APT_HackTool_MSIL_SHARPSTOMP_2.yar +0 -22
  4966. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPSTOMP/production/yara/HackTool_MSIL_SharpStomp_1.yar +0 -15
  4967. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPUTILS/production/yara/Tool_MSIL_CSharpUtils_1.yar +0 -19
  4968. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPY/production/yara/Loader_MSIL_SharPy_1.yar +0 -15
  4969. package/bundled-rules/yara-rules/community/mandiant/rules/SHARPZEROLOGON/production/yara/HackTool_MSIL_SHARPZEROLOGON_1.yar +0 -15
  4970. package/bundled-rules/yara-rules/community/mandiant/rules/SINFULOFFICE/production/yara/Builder_MSIL_SinfulOffice_1.yar +0 -15
  4971. package/bundled-rules/yara-rules/community/mandiant/rules/SINFULOFFICE/supplemental/yara/Methodology_OLE_CHARENCODING_2.yar +0 -23
  4972. package/bundled-rules/yara-rules/community/mandiant/rules/TITOSPECIAL/production/yara/APT_HackTool_MSIL_TITOSPECIAL_1.yar +0 -20
  4973. package/bundled-rules/yara-rules/community/mandiant/rules/TITOSPECIAL/production/yara/CredTheft_MSIL_TitoSpecial_1.yar +0 -27
  4974. package/bundled-rules/yara-rules/community/mandiant/rules/TITOSPECIAL/production/yara/CredTheft_MSIL_TitoSpecial_2.yar +0 -16
  4975. package/bundled-rules/yara-rules/community/mandiant/rules/TITOSPECIAL/production/yara/HackTool_Win32_AndrewSpecial_1.yar +0 -18
  4976. package/bundled-rules/yara-rules/community/mandiant/rules/TITOSPECIAL/production/yara/HackTool_Win64_AndrewSpecial_1.yar +0 -18
  4977. package/bundled-rules/yara-rules/community/mandiant/rules/TRIMBISHOP/new/yara/Loader_MSIL_RURALBISHOP_1.yar +0 -22
  4978. package/bundled-rules/yara-rules/community/mandiant/rules/TRIMBISHOP/new/yara/Loader_MSIL_RURALBISHOP_2.yar +0 -22
  4979. package/bundled-rules/yara-rules/community/mandiant/rules/TRIMBISHOP/production/yara/APT_Loader_MSIL_TRIMBISHOP_1.yar +0 -22
  4980. package/bundled-rules/yara-rules/community/mandiant/rules/TRIMBISHOP/production/yara/APT_Loader_MSIL_TRIMBISHOP_2.yar +0 -22
  4981. package/bundled-rules/yara-rules/community/mandiant/rules/TRIMBISHOP/production/yara/Loader_MSIL_RuralBishop_3.yar +0 -15
  4982. package/bundled-rules/yara-rules/community/mandiant/rules/TRIMBISHOP/production/yara/Loader_MSIL_TrimBishop_1.yar +0 -26
  4983. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_DNSOVERHTTPS_C2_1.yar +0 -16
  4984. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_MODIFIEDSHARPVIEW_1.yar +0 -15
  4985. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_PRAT_1.yar +0 -18
  4986. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_REDTEAMMATERIALS_1.yar +0 -16
  4987. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_SHARPDACL_1.yar +0 -15
  4988. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_SHARPDNS_1.yar +0 -15
  4989. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_SHARPGOPHER_1.yar +0 -15
  4990. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_SHARPNATIVEZIPPER_1.yar +0 -15
  4991. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_SHARPNFS_1.yar +0 -15
  4992. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_SHARPPATCHCHECK_1.yar +0 -15
  4993. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_SHARPSQLCLIENT_1.yar +0 -15
  4994. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_SHARPTEMPLATE_1.yar +0 -15
  4995. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_SHARPWEBCRAWLER_1.yar +0 -15
  4996. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/APT_HackTool_MSIL_SHARPZIPLIBZIPPER_1.yar +0 -15
  4997. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/CredTheft_MSIL_CredSnatcher_1.yar +0 -15
  4998. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/production/yara/CredTheft_MSIL_WCMDump_1.yar +0 -15
  4999. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/supplemental/yara/Loader_MSIL_Generic_1.yar +0 -21
  5000. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/supplemental/yara/Loader_Win_Generic_19.yar +0 -19
  5001. package/bundled-rules/yara-rules/community/mandiant/rules/UNCATEGORIZED/supplemental/yara/Loader_Win_Generic_20.yar +0 -19
  5002. package/bundled-rules/yara-rules/community/mandiant/rules/WILDCHILD/production/yara/APT_Loader_MSIL_WILDCHILD_1.yar +0 -18
  5003. package/bundled-rules/yara-rules/community/mandiant/rules/WILDCHILD/production/yara/Dropper_HTA_WildChild_1.yar +0 -24
  5004. package/bundled-rules/yara-rules/community/mandiant/rules/WILDCHILD/production/yara/Loader_MSIL_WildChild_1.yar +0 -15
  5005. package/bundled-rules/yara-rules/community/mandiant/rules/WMIRUNNER/production/yara/Loader_MSIL_WMIRunner_1.yar +0 -15
  5006. package/bundled-rules/yara-rules/community/mandiant/rules/WMISHARP/production/yara/HackTool_MSIL_WMISharp_1.yar +0 -15
  5007. package/bundled-rules/yara-rules/community/mandiant/rules/WMISPY/production/yara/APT_HackTool_MSIL_WMISPY_2.yar +0 -24
  5008. package/bundled-rules/yara-rules/community/mandiant/rules/WMISPY/production/yara/HackTool_MSIL_WMIspy_1.yar +0 -15
  5009. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/ByteCode.MSIL.Backdoor.AgentRacoon.yara +0 -128
  5010. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/ByteCode.MSIL.Backdoor.AsyncRAT.yara +0 -149
  5011. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/ByteCode.MSIL.Backdoor.LimeRAT.yara +0 -91
  5012. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/ByteCode.MSIL.Backdoor.Menorah.yara +0 -169
  5013. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/ByteCode.MSIL.Backdoor.NjRAT.yara +0 -266
  5014. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/ByteCode.MSIL.Backdoor.OrcusRAT.yara +0 -134
  5015. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/ByteCode.MSIL.Backdoor.ResolverRAT.yara +0 -94
  5016. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/ByteCode.MSIL.Backdoor.Veaty.yara +0 -84
  5017. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.AutoColor.yara +0 -177
  5018. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.BPFDoor.yara +0 -326
  5019. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.ChaosRAT.yara +0 -270
  5020. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.GTPDOOR.yara +0 -264
  5021. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.GobRAT.yara +0 -168
  5022. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.Krasue.yara +0 -127
  5023. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.Linodas.yara +0 -216
  5024. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.NoodRAT.yara +0 -162
  5025. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.PondRAT.yara +0 -99
  5026. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.PygmyGoat.yara +0 -135
  5027. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.Sshdinjector.yara +0 -197
  5028. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Backdoor.WolfsBane.yara +0 -124
  5029. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Linux.Trojan.ChinaZ.yara +0 -246
  5030. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Win32.Backdoor.Konni.yara +0 -190
  5031. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Win64.Backdoor.BackConnect.yara +0 -154
  5032. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Win64.Backdoor.EggStremeFuel.yara +0 -144
  5033. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Win64.Backdoor.Konni.yara +0 -205
  5034. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Win64.Backdoor.Minodo.yara +0 -110
  5035. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Win64.Backdoor.MiyaRAT.yara +0 -264
  5036. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Win64.Backdoor.SideTwist.yara +0 -154
  5037. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Win64.Backdoor.Voldemort.yara +0 -208
  5038. package/bundled-rules/yara-rules/community/reversinglabs/yara/backdoor/Win64.Backdoor.wmRAT.yara +0 -144
  5039. package/bundled-rules/yara-rules/community/reversinglabs/yara/certificate/blocklist.yara +0 -17288
  5040. package/bundled-rules/yara-rules/community/reversinglabs/yara/downloader/Win32.Downloader.dlMarlboro.yara +0 -79
  5041. package/bundled-rules/yara-rules/community/reversinglabs/yara/exploit/Win32.Exploit.CVE20200601.yara +0 -253
  5042. package/bundled-rules/yara-rules/community/reversinglabs/yara/infostealer/ByteCode.MSIL.Infostealer.GomorrahStealer.yara +0 -111
  5043. package/bundled-rules/yara-rules/community/reversinglabs/yara/infostealer/Win32.Infostealer.LumarStealer.yara +0 -190
  5044. package/bundled-rules/yara-rules/community/reversinglabs/yara/infostealer/Win32.Infostealer.MultigrainPOS.yara +0 -88
  5045. package/bundled-rules/yara-rules/community/reversinglabs/yara/infostealer/Win32.Infostealer.ProjectHookPOS.yara +0 -98
  5046. package/bundled-rules/yara-rules/community/reversinglabs/yara/infostealer/Win32.Infostealer.StealC.yara +0 -57
  5047. package/bundled-rules/yara-rules/community/reversinglabs/yara/infostealer/Win64.Infostealer.Daolpu.yara +0 -322
  5048. package/bundled-rules/yara-rules/community/reversinglabs/yara/infostealer/Win64.Infostealer.Skuld.yara +0 -192
  5049. package/bundled-rules/yara-rules/community/reversinglabs/yara/infostealer/Win64.Infostealer.WeaselStore.yara +0 -198
  5050. package/bundled-rules/yara-rules/community/reversinglabs/yara/pua/Win32.PUA.Domaiq.yara +0 -169
  5051. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Apis.yara +0 -75
  5052. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.ChupaCabra.yara +0 -90
  5053. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Cring.yara +0 -66
  5054. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Dusk.yara +0 -73
  5055. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.EAF.yara +0 -89
  5056. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Eternity.yara +0 -74
  5057. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Fantom.yara +0 -97
  5058. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.GhosTEncryptor.yara +0 -69
  5059. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Ghostbin.yara +0 -61
  5060. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.GoodWill.yara +0 -89
  5061. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.HarpoonLocker.yara +0 -96
  5062. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Hog.yara +0 -70
  5063. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Invert.yara +0 -66
  5064. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Janelle.yara +0 -96
  5065. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Khonsari.yara +0 -68
  5066. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.McBurglar.yara +0 -75
  5067. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Moisha.yara +0 -86
  5068. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Namaste.yara +0 -81
  5069. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Oct.yara +0 -68
  5070. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Pacman.yara +0 -68
  5071. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.PoliceRecords.yara +0 -79
  5072. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Povlsomware.yara +0 -64
  5073. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Retis.yara +0 -74
  5074. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.TaRRaK.yara +0 -96
  5075. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Thanos.yara +0 -106
  5076. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.TimeCrypt.yara +0 -69
  5077. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.TimeTime.yara +0 -75
  5078. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.Venom.yara +0 -68
  5079. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.WildFire.yara +0 -77
  5080. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.WormLocker.yara +0 -69
  5081. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/ByteCode.MSIL.Ransomware.ZeroLocker.yara +0 -70
  5082. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Bytecode.MSIL.Ransomware.CobraLocker.yara +0 -59
  5083. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Linux.Ransomware.GwisinLocker.yara +0 -354
  5084. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Linux.Ransomware.Helldown.yara +0 -127
  5085. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Linux.Ransomware.KillDisk.yara +0 -144
  5086. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Linux.Ransomware.LuckyJoe.yara +0 -146
  5087. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Linux.Ransomware.RedAlert.yara +0 -146
  5088. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.5ss5c.yara +0 -267
  5089. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.ASN1Encoder.yara +0 -136
  5090. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Acepy.yara +0 -69
  5091. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Afrodita.yara +0 -119
  5092. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Ako.yara +0 -152
  5093. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Alcatraz.yara +0 -91
  5094. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.AnteFrigus.yara +0 -210
  5095. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Archiveus.yara +0 -50
  5096. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Armage.yara +0 -128
  5097. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Atlas.yara +0 -99
  5098. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Avaddon.yara +0 -148
  5099. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.AvosLocker.yara +0 -108
  5100. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.BKRansomware.yara +0 -79
  5101. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Babuk.yara +0 -117
  5102. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.BadBlock.yara +0 -100
  5103. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Badbeeteam.yara +0 -137
  5104. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Balaclava.yara +0 -113
  5105. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Bam2021.yara +0 -167
  5106. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.BananaCrypt.yara +0 -103
  5107. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.BandarChor.yara +0 -97
  5108. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.BitCrypt.yara +0 -112
  5109. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.BlackBasta.yara +0 -531
  5110. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.BlackCat.yara +0 -109
  5111. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.BlackMoon.yara +0 -70
  5112. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Blitzkrieg.yara +0 -127
  5113. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.BlueLocker.yara +0 -130
  5114. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.BrainCrypt.yara +0 -121
  5115. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Buran.yara +0 -91
  5116. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.ChiChi.yara +0 -66
  5117. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Cicada3301.yara +0 -309
  5118. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Cincoo.yara +0 -78
  5119. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Clop.yara +0 -109
  5120. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Conti.yara +0 -74
  5121. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Cryakl.yara +0 -64
  5122. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Crypmic.yara +0 -56
  5123. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Crypren.yara +0 -144
  5124. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.CryptoBit.yara +0 -113
  5125. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.CryptoFortress.yara +0 -162
  5126. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.CryptoJoker.yara +0 -140
  5127. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.CryptoLocker.yara +0 -154
  5128. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.CryptoWall.yara +0 -312
  5129. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Crysis.yara +0 -108
  5130. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Cuba.yara +0 -126
  5131. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.CyberVolk.yara +0 -293
  5132. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.DMALocker.yara +0 -149
  5133. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.DMR.yara +0 -214
  5134. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.DarkSide.yara +0 -94
  5135. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.DearCry.yara +0 -96
  5136. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Defray.yara +0 -157
  5137. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Delphimorix.yara +0 -67
  5138. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.DenizKizi.yara +0 -88
  5139. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.DesuCrypt.yara +0 -93
  5140. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Dharma.yara +0 -108
  5141. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.DirtyDecrypt.yara +0 -112
  5142. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.District.yara +0 -194
  5143. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.DogeCrypt.yara +0 -114
  5144. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Dragon.yara +0 -149
  5145. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Dualshot.yara +0 -112
  5146. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Elpaco.yara +0 -316
  5147. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Encoded01.yara +0 -141
  5148. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Erica.yara +0 -76
  5149. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.FCT.yara +0 -86
  5150. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.FLKR.yara +0 -71
  5151. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.FarAttack.yara +0 -93
  5152. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.FenixLocker.yara +0 -143
  5153. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Ferrlock.yara +0 -131
  5154. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Flamingo.yara +0 -54
  5155. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.FuxSocy.yara +0 -114
  5156. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.GPGQwerty.yara +0 -83
  5157. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.GandCrab.yara +0 -892
  5158. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.GarrantyDecrypt.yara +0 -79
  5159. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Gibon.yara +0 -122
  5160. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.GlobeImposter.yara +0 -171
  5161. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Gomer.yara +0 -106
  5162. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Good.yara +0 -82
  5163. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Gpcode.yara +0 -67
  5164. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.GusCrypter.yara +0 -129
  5165. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.HDDCryptor.yara +0 -157
  5166. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.HDMR.yara +0 -161
  5167. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.HakunaMatata.yara +0 -373
  5168. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Henry.yara +0 -80
  5169. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.HentaiOniichan.yara +0 -140
  5170. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Hermes.yara +0 -284
  5171. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Horsedeal.yara +0 -106
  5172. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.HowAreYou.yara +0 -205
  5173. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.HydraCrypt.yara +0 -174
  5174. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.IFN643.yara +0 -90
  5175. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.InfoDot.yara +0 -115
  5176. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.JSWorm.yara +0 -93
  5177. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Jamper.yara +0 -110
  5178. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Jemd.yara +0 -105
  5179. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Jormungand.yara +0 -135
  5180. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.JuicyLemon.yara +0 -116
  5181. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Kangaroo.yara +0 -91
  5182. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.KawaiiLocker.yara +0 -135
  5183. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.KillDisk.yara +0 -80
  5184. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Knot.yara +0 -118
  5185. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Kovter.yara +0 -141
  5186. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Koxic.yara +0 -87
  5187. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Kraken.yara +0 -151
  5188. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Ladon.yara +0 -101
  5189. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.LeChiffre.yara +0 -123
  5190. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.LockBit.yara +0 -282
  5191. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Lolkek.yara +0 -106
  5192. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.LooCipher.yara +0 -87
  5193. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Lorenz.yara +0 -252
  5194. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.MRAC.yara +0 -69
  5195. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.MZP.yara +0 -147
  5196. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Mafia.yara +0 -142
  5197. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Magniber.yara +0 -114
  5198. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Major.yara +0 -261
  5199. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Makop.yara +0 -99
  5200. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Maktub.yara +0 -116
  5201. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Marlboro.yara +0 -117
  5202. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.MarsJoke.yara +0 -157
  5203. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Matsnu.yara +0 -116
  5204. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.MedusaLocker.yara +0 -174
  5205. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Meow.yara +0 -84
  5206. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Monalisa.yara +0 -83
  5207. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Montserrat.yara +0 -118
  5208. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Motocos.yara +0 -75
  5209. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.MountLocker.yara +0 -86
  5210. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.NB65.yara +0 -68
  5211. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.NanoLocker.yara +0 -79
  5212. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Nefilim.yara +0 -150
  5213. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Nemty.yara +0 -205
  5214. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Networm.yara +0 -103
  5215. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.NotPetya.yara +0 -73
  5216. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Oni.yara +0 -82
  5217. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.OphionLocker.yara +0 -105
  5218. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Ouroboros.yara +0 -175
  5219. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Outsider.yara +0 -88
  5220. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.PXJ.yara +0 -158
  5221. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Paradise.yara +0 -81
  5222. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Pay2Key.yara +0 -99
  5223. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Petya.yara +0 -58
  5224. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Plague17.yara +0 -263
  5225. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.PrincessLocker.yara +0 -92
  5226. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Prometey.yara +0 -156
  5227. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.RagnarLocker.yara +0 -108
  5228. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Ragnarok.yara +0 -110
  5229. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Ransoc.yara +0 -114
  5230. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.RansomPlus.yara +0 -95
  5231. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Ransomexx.yara +0 -147
  5232. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Redeemer.yara +0 -105
  5233. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.RegretLocker.yara +0 -206
  5234. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.RetMyData.yara +0 -79
  5235. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Reveton.yara +0 -118
  5236. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Revil.yara +0 -101
  5237. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Rokku.yara +0 -147
  5238. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Ryuk.yara +0 -199
  5239. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Sage.yara +0 -77
  5240. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Sanwai.yara +0 -71
  5241. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Sarbloh.yara +0 -88
  5242. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Satan.yara +0 -152
  5243. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Satana.yara +0 -123
  5244. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Saturn.yara +0 -105
  5245. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Sepsis.yara +0 -126
  5246. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Serpent.yara +0 -122
  5247. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.SevenSevenSeven.yara +0 -148
  5248. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.ShadowCryptor.yara +0 -89
  5249. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Sherminator.yara +0 -157
  5250. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Sifrelendi.yara +0 -67
  5251. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Sifreli.yara +0 -119
  5252. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Sigrun.yara +0 -111
  5253. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Skystars.yara +0 -97
  5254. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Spora.yara +0 -124
  5255. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.TBLocker.yara +0 -85
  5256. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.TargetCompany.yara +0 -141
  5257. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.TechandStrat.yara +0 -106
  5258. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.TeleCrypt.yara +0 -109
  5259. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Termite.yara +0 -151
  5260. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Teslacrypt.yara +0 -665
  5261. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Teslarvng.yara +0 -137
  5262. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Thanatos.yara +0 -85
  5263. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.TorrentLocker.yara +0 -98
  5264. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.VHDLocker.yara +0 -152
  5265. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.VanHelsing.yara +0 -464
  5266. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.VegaLocker.yara +0 -100
  5267. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Velso.yara +0 -230
  5268. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.WannaCry.yara +0 -135
  5269. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.WaspLocker.yara +0 -76
  5270. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Wastedlocker.yara +0 -86
  5271. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.WinWord64.yara +0 -215
  5272. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.WsIR.yara +0 -73
  5273. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Xorist.yara +0 -150
  5274. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Zeoticus.yara +0 -90
  5275. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Zeppelin.yara +0 -109
  5276. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.ZeroCrypt.yara +0 -94
  5277. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Zhen.yara +0 -176
  5278. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win32.Ransomware.Zoldon.yara +0 -107
  5279. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Ako.yara +0 -173
  5280. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Albabat.yara +0 -139
  5281. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.AntiWar.yara +0 -146
  5282. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.AwesomeScott.yara +0 -101
  5283. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.BlackBasta.yara +0 -293
  5284. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Cactus.yara +0 -190
  5285. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Curator.yara +0 -94
  5286. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.DST.yara +0 -170
  5287. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.HermeticRansom.yara +0 -105
  5288. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.HotCoffee.yara +0 -111
  5289. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Nokoyawa.yara +0 -104
  5290. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Pandora.yara +0 -95
  5291. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.RedRoman.yara +0 -82
  5292. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Rook.yara +0 -122
  5293. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.SeedLocker.yara +0 -91
  5294. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Seth.yara +0 -122
  5295. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Solaso.yara +0 -171
  5296. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Vovalex.yara +0 -81
  5297. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Warlock.yara +0 -162
  5298. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.WhiteBlackCrypt.yara +0 -91
  5299. package/bundled-rules/yara-rules/community/reversinglabs/yara/ransomware/Win64.Ransomware.Wintenzz.yara +0 -83
  5300. package/bundled-rules/yara-rules/community/reversinglabs/yara/rootkit/Linux.Rootkit.Pumakit.yara +0 -161
  5301. package/bundled-rules/yara-rules/community/reversinglabs/yara/trojan/Linux.Trojan.AcidRain.yara +0 -67
  5302. package/bundled-rules/yara-rules/community/reversinglabs/yara/trojan/Linux.Trojan.BiBiWiper.yara +0 -76
  5303. package/bundled-rules/yara-rules/community/reversinglabs/yara/trojan/Win32.Trojan.BiBiWiper.yara +0 -102
  5304. package/bundled-rules/yara-rules/community/reversinglabs/yara/trojan/Win32.Trojan.CaddyWiper.yara +0 -95
  5305. package/bundled-rules/yara-rules/community/reversinglabs/yara/trojan/Win32.Trojan.Dridex.yara +0 -80
  5306. package/bundled-rules/yara-rules/community/reversinglabs/yara/trojan/Win32.Trojan.Emotet.yara +0 -182
  5307. package/bundled-rules/yara-rules/community/reversinglabs/yara/trojan/Win32.Trojan.HermeticWiper.yara +0 -50
  5308. package/bundled-rules/yara-rules/community/reversinglabs/yara/trojan/Win32.Trojan.IsaacWiper.yara +0 -76
  5309. package/bundled-rules/yara-rules/community/reversinglabs/yara/trojan/Win32.Trojan.PathWiper.yara +0 -280
  5310. package/bundled-rules/yara-rules/community/reversinglabs/yara/trojan/Win32.Trojan.TrickBot.yara +0 -46
  5311. package/bundled-rules/yara-rules/community/reversinglabs/yara/virus/Linux.Virus.Vit.yara +0 -36
  5312. package/bundled-rules/yara-rules/community/reversinglabs/yara/virus/Win32.Virus.Awfull.yara +0 -33
  5313. package/bundled-rules/yara-rules/community/reversinglabs/yara/virus/Win32.Virus.Cmay.yara +0 -73
  5314. package/bundled-rules/yara-rules/community/reversinglabs/yara/virus/Win32.Virus.DeadCode.yara +0 -76
  5315. package/bundled-rules/yara-rules/community/reversinglabs/yara/virus/Win32.Virus.Elerad.yara +0 -33
  5316. package/bundled-rules/yara-rules/community/reversinglabs/yara/virus/Win32.Virus.Greenp.yara +0 -46
  5317. package/bundled-rules/yara-rules/community/reversinglabs/yara/virus/Win32.Virus.Mocket.yara +0 -58
  5318. package/bundled-rules/yara-rules/community/reversinglabs/yara/virus/Win32.Virus.Negt.yara +0 -94
  5319. package/bundled-rules/yara-rules/community/trellix/APT/APT_Derusbi.yar +0 -248
  5320. package/bundled-rules/yara-rules/community/trellix/APT/APT_KimSuky_dllbckdr.yar +0 -50
  5321. package/bundled-rules/yara-rules/community/trellix/APT/APT_MiniASP_pdb.yar +0 -26
  5322. package/bundled-rules/yara-rules/community/trellix/APT/APT_Operation_SoftCell.yar +0 -308
  5323. package/bundled-rules/yara-rules/community/trellix/APT/APT_Tortoiseshell_Syskit.yar +0 -40
  5324. package/bundled-rules/yara-rules/community/trellix/APT/APT_Troj_HermWiper.yar +0 -27
  5325. package/bundled-rules/yara-rules/community/trellix/APT/APT_acidbox.yar +0 -98
  5326. package/bundled-rules/yara-rules/community/trellix/APT/APT_auriga_biscuit.yar +0 -39
  5327. package/bundled-rules/yara-rules/community/trellix/APT/APT_babar_pdb.yar +0 -35
  5328. package/bundled-rules/yara-rules/community/trellix/APT/APT_blackenergy_pdb.yar +0 -38
  5329. package/bundled-rules/yara-rules/community/trellix/APT/APT_decade_of_RATs.yar +0 -221
  5330. package/bundled-rules/yara-rules/community/trellix/APT/APT_elise_pdb.yar +0 -29
  5331. package/bundled-rules/yara-rules/community/trellix/APT/APT_gdocupload_pdb.yar +0 -32
  5332. package/bundled-rules/yara-rules/community/trellix/APT/APT_hangover.yar +0 -229
  5333. package/bundled-rules/yara-rules/community/trellix/APT/APT_hikit_rootkit_pdb.yar +0 -28
  5334. package/bundled-rules/yara-rules/community/trellix/APT/APT_karkoff_dnspionaje.yar +0 -30
  5335. package/bundled-rules/yara-rules/community/trellix/APT/APT_lagulon_pdb.yar +0 -25
  5336. package/bundled-rules/yara-rules/community/trellix/APT/APT_manitsme_trojan_pdb.yar +0 -36
  5337. package/bundled-rules/yara-rules/community/trellix/APT/APT_milum_wildpressure.yar +0 -29
  5338. package/bundled-rules/yara-rules/community/trellix/APT/APT_mirage_pdb.yar +0 -26
  5339. package/bundled-rules/yara-rules/community/trellix/APT/APT_operation_aurora.yar +0 -26
  5340. package/bundled-rules/yara-rules/community/trellix/APT/APT_operation_skeleton.yar +0 -33
  5341. package/bundled-rules/yara-rules/community/trellix/APT/APT_operation_troy.yar +0 -26
  5342. package/bundled-rules/yara-rules/community/trellix/APT/APT_turla_pdb.yar +0 -25
  5343. package/bundled-rules/yara-rules/community/trellix/APT/APT_winnti.yar +0 -27
  5344. package/bundled-rules/yara-rules/community/trellix/APT/enfal_pdb.yar +0 -29
  5345. package/bundled-rules/yara-rules/community/trellix/APT/flamer_pdb.yar +0 -25
  5346. package/bundled-rules/yara-rules/community/trellix/APT/gauss_pdb.yar +0 -25
  5347. package/bundled-rules/yara-rules/community/trellix/APT/ixeshe_bled_pdb.yar +0 -24
  5348. package/bundled-rules/yara-rules/community/trellix/malware/MALDOC_rtf_bluetea_builder.yar +0 -31
  5349. package/bundled-rules/yara-rules/community/trellix/malware/MALW_Eicar.yar +0 -22
  5350. package/bundled-rules/yara-rules/community/trellix/malware/MALW_MsWordExploit_DOC.yar +0 -24
  5351. package/bundled-rules/yara-rules/community/trellix/malware/MALW_NionSpy.yar +0 -25
  5352. package/bundled-rules/yara-rules/community/trellix/malware/MALW_Rovnix.yar +0 -38
  5353. package/bundled-rules/yara-rules/community/trellix/malware/MALW_Shifu.yar +0 -24
  5354. package/bundled-rules/yara-rules/community/trellix/malware/MALW_VPNfilter.yar +0 -41
  5355. package/bundled-rules/yara-rules/community/trellix/malware/MALW_alina_pos_pdb.yar +0 -25
  5356. package/bundled-rules/yara-rules/community/trellix/malware/MALW_backdoor_havex_pdb.yar +0 -26
  5357. package/bundled-rules/yara-rules/community/trellix/malware/MALW_backdoor_kankan_pdb.yar +0 -27
  5358. package/bundled-rules/yara-rules/community/trellix/malware/MALW_backdoor_katorxa_pdb.yar +0 -25
  5359. package/bundled-rules/yara-rules/community/trellix/malware/MALW_blackpos_pdb.yar +0 -25
  5360. package/bundled-rules/yara-rules/community/trellix/malware/MALW_browser_fox_adware.yar +0 -25
  5361. package/bundled-rules/yara-rules/community/trellix/malware/MALW_chickdos_pdb.yar +0 -25
  5362. package/bundled-rules/yara-rules/community/trellix/malware/MALW_cobaltstrike.yar +0 -38
  5363. package/bundled-rules/yara-rules/community/trellix/malware/MALW_cutwail.yar +0 -25
  5364. package/bundled-rules/yara-rules/community/trellix/malware/MALW_downloader_darkmegi.yar +0 -25
  5365. package/bundled-rules/yara-rules/community/trellix/malware/MALW_dridex_p2p_pdb.yar +0 -25
  5366. package/bundled-rules/yara-rules/community/trellix/malware/MALW_dropper_demekaf_pdb.yar +0 -25
  5367. package/bundled-rules/yara-rules/community/trellix/malware/MALW_emotet.yar +0 -32
  5368. package/bundled-rules/yara-rules/community/trellix/malware/MALW_festi_botnet_pdb.yar +0 -25
  5369. package/bundled-rules/yara-rules/community/trellix/malware/MALW_fritzfrog.yar +0 -26
  5370. package/bundled-rules/yara-rules/community/trellix/malware/MALW_inabot_worm_pdb.yar +0 -25
  5371. package/bundled-rules/yara-rules/community/trellix/malware/MALW_jatboss.yar +0 -36
  5372. package/bundled-rules/yara-rules/community/trellix/malware/MALW_kelhios_botnet_pdb.yar +0 -26
  5373. package/bundled-rules/yara-rules/community/trellix/malware/MALW_likseput_backdoor_pdb.yar +0 -25
  5374. package/bundled-rules/yara-rules/community/trellix/malware/MALW_liquorbot.yar +0 -23
  5375. package/bundled-rules/yara-rules/community/trellix/malware/MALW_mangzamel_trojan_pdb.yar +0 -26
  5376. package/bundled-rules/yara-rules/community/trellix/malware/MALW_masslogger_stealer.yar +0 -63
  5377. package/bundled-rules/yara-rules/community/trellix/malware/MALW_medfos_pdb.yar +0 -25
  5378. package/bundled-rules/yara-rules/community/trellix/malware/MALW_redline.yar +0 -38
  5379. package/bundled-rules/yara-rules/community/trellix/malware/MALW_rietspoof_loader.yar +0 -22
  5380. package/bundled-rules/yara-rules/community/trellix/malware/MALW_screenlocker_5h311_1nj3c706.yar +0 -33
  5381. package/bundled-rules/yara-rules/community/trellix/malware/MALW_shellcode_mykins_botnet.yar +0 -27
  5382. package/bundled-rules/yara-rules/community/trellix/malware/MALW_vbs_mykins_botnet.yar +0 -29
  5383. package/bundled-rules/yara-rules/community/trellix/malware/MAL_cyax_sharp_loader.yar +0 -16
  5384. package/bundled-rules/yara-rules/community/trellix/miners/MINER_Monero.yar +0 -44
  5385. package/bundled-rules/yara-rules/community/trellix/miners/Trojan_CoinMiner.yar +0 -23
  5386. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Anatova.yar +0 -25
  5387. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Avoslocker.yar +0 -27
  5388. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_BabukLocker_Jan2021.yar +0 -25
  5389. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Babuk_Packed_Feb2021.yar +0 -30
  5390. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_BadRabbit.yar +0 -101
  5391. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Bitpaymer.yar +0 -72
  5392. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Buran.yar +0 -27
  5393. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_CTBLocker.yar +0 -26
  5394. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_ClopRansomNote.yar +0 -34
  5395. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_CryptoNar.yar +0 -36
  5396. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Cryptolocker.yar +0 -81
  5397. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Darkside.yar +0 -47
  5398. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Exorcist.yar +0 -26
  5399. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_GPGQwerty.yar +0 -26
  5400. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Kraken.yar +0 -108
  5401. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Linux_HelloKitty0721.yar +0 -28
  5402. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Lockbit2.yar +0 -25
  5403. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_LockerGoga.yar +0 -36
  5404. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Loocipher.yar +0 -46
  5405. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_MONGOLOCK.yar +0 -42
  5406. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_MegaCortex.yar +0 -26
  5407. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_NEFILIM.yar +0 -98
  5408. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Nemty.yar +0 -80
  5409. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Pico.yar +0 -37
  5410. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_PureLocker.yar +0 -25
  5411. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_RobbinHood.yar +0 -38
  5412. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Ryuk.yar +0 -113
  5413. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_SamSam.yar +0 -105
  5414. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Shiva.yar +0 -37
  5415. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Sodinokibi.yar +0 -53
  5416. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_Suncrypt.yar +0 -50
  5417. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_acroware.yar +0 -29
  5418. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_amba.yar +0 -41
  5419. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_coronavirus.yar +0 -80
  5420. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_egregor.yar +0 -31
  5421. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_jeff_dev.yar +0 -28
  5422. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_locdoor.yar +0 -32
  5423. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_makop.yar +0 -32
  5424. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_mountlocker.yar +0 -32
  5425. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_netwalker.yar +0 -140
  5426. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_ragnarlocker.yar +0 -45
  5427. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_shrug2.yar +0 -30
  5428. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_snake_ransomware.yar +0 -26
  5429. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_termite.yar +0 -32
  5430. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_thiefquest.yar +0 -46
  5431. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_wannaren.yar +0 -34
  5432. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_wastedlocker.yar +0 -32
  5433. package/bundled-rules/yara-rules/community/trellix/ransomware/RANSOM_xinof.yar +0 -82
  5434. package/bundled-rules/yara-rules/community/trellix/ransomware/Ransom_Conti.yar +0 -37
  5435. package/bundled-rules/yara-rules/community/trellix/ransomware/Ransom_Maze.yar +0 -40
  5436. package/bundled-rules/yara-rules/community/trellix/ransomware/Ransom_Mespinoza.yar +0 -27
  5437. package/bundled-rules/yara-rules/community/trellix/ransomware/Ransom_ThunderX.yar +0 -46
  5438. package/bundled-rules/yara-rules/community/trellix/ransomware/Ransom_Vovalex1.yar +0 -42
  5439. package/bundled-rules/yara-rules/community/trellix/ransomware/Ransom_Win_BlackCat_public.yar +0 -24
  5440. package/bundled-rules/yara-rules/community/trellix/ransomware/ransom_BlackKingDom.yar +0 -49
  5441. package/bundled-rules/yara-rules/community/trellix/stealer/STEALER_EmiratesStatement.yar +0 -24
  5442. package/bundled-rules/yara-rules/community/trellix/stealer/STEALER_Lokibot.yar +0 -40
  5443. package/bundled-rules/yara-rules/community/trellix/stealer/STEALER_credstealer.yar +0 -24
  5444. package/bundled-rules/yara-rules/community/volexity/2021/2021-03-02 - Operation Exchange Marauder/indicators/yara.yar +0 -89
  5445. package/bundled-rules/yara-rules/community/volexity/2021/2021-05-27 - Suspected APT29 Operation Launches Election Fraud Themed Phishing Campaigns/indicators/yara.yar +0 -87
  5446. package/bundled-rules/yara-rules/community/volexity/2021/2021-08-17 - InkySquid Part 1/indicators/yara.yar +0 -120
  5447. package/bundled-rules/yara-rules/community/volexity/2021/2021-08-24 - InkySquid Part 2/indicators/yara.yar +0 -112
  5448. package/bundled-rules/yara-rules/community/volexity/2021/2021-12-06 - XEGroup/indicators/yara.yar +0 -208
  5449. package/bundled-rules/yara-rules/community/volexity/2022/2022-03-22 GIMMICK/indicators/yara.yar +0 -86
  5450. package/bundled-rules/yara-rules/community/volexity/2022/2022-06-02 Active Exploitation Of Confluence 0-day/indicators/yara.yar +0 -84
  5451. package/bundled-rules/yara-rules/community/volexity/2022/2022-06-15 DriftingCloud - Zero-Day Sophos Firewall Exploitation and an Insidious Breach/indicators/yara.yar +0 -230
  5452. package/bundled-rules/yara-rules/community/volexity/2022/2022-07-28 SharpTongue SharpTongue Deploys Clever Mail-Stealing Browser Extension SHARPEXT/yara.yar +0 -52
  5453. package/bundled-rules/yara-rules/community/volexity/2022/2022-08-10 Mass exploitation of (Un)authenticated Zimbra RCE CVE-2022-27925/yara.yar +0 -86
  5454. package/bundled-rules/yara-rules/community/volexity/2022/2022-12-01 Buyer Beware - Fake Cryptocurrency Applications Serving as Front for AppleJeus Malware/yara.yar +0 -165
  5455. package/bundled-rules/yara-rules/community/volexity/2023/2023-03-07 AVBurner/yara.yar +0 -40
  5456. package/bundled-rules/yara-rules/community/volexity/2023/2023-03-30 3CX/indicators/rules.yar +0 -152
  5457. package/bundled-rules/yara-rules/community/volexity/2023/2023-06-28 POWERSTAR/indicators/rules.yar +0 -150
  5458. package/bundled-rules/yara-rules/community/volexity/2023/2023-09-22 EvilBamboo/indicators/rules.yar +0 -472
  5459. package/bundled-rules/yara-rules/community/volexity/2024/2024-01-10 Ivanti Connect Secure/indicators/yara.yar +0 -114
  5460. package/bundled-rules/yara-rules/community/volexity/2024/2024-02-13 CharmingCypress/rules.yar +0 -352
  5461. package/bundled-rules/yara-rules/community/volexity/2024/2024-04-12 Palo Alto Networks GlobalProtect/indicators/rules.yar +0 -116
  5462. package/bundled-rules/yara-rules/community/volexity/2024/2024-06-13 DISGOMOJI/indicators/rules.yar +0 -267
  5463. package/bundled-rules/yara-rules/community/volexity/2024/2024-08-02 StormBamboo/rules.yar +0 -383
  5464. package/bundled-rules/yara-rules/community/volexity/2024/2024-11-15 BrazenBamboo/rules.yar +0 -613
  5465. package/bundled-rules/yara-rules/community/volexity/2025/2025-10-08 UTA0388/rules.yar +0 -134
  5466. package/bundled-rules/yara-rules/community/withsecure/Andariel2025/andariel.yara +0 -152
  5467. package/bundled-rules/yara-rules/community/withsecure/DUCKTAIL/ducktail_artifacts.yar +0 -20
  5468. package/bundled-rules/yara-rules/community/withsecure/DUCKTAIL/ducktail_dotnet_core_infostealer.yar +0 -103
  5469. package/bundled-rules/yara-rules/community/withsecure/DUCKTAIL/ducktail_exceldna_packed.yara +0 -27
  5470. package/bundled-rules/yara-rules/community/withsecure/DUCKTAIL/ducktail_nativeaot.yara +0 -22
  5471. package/bundled-rules/yara-rules/community/withsecure/Kapeka/kapeka_backdoor.yar +0 -21
  5472. package/bundled-rules/yara-rules/community/withsecure/SILKLOADER/silkloader.yar +0 -20
  5473. package/bundled-rules/yara-rules/community/withsecure/TangleCrypt/TangleCrypt_YARA.yar +0 -27
  5474. package/bundled-rules/yara-rules/custom/malware-indicators.yar +0 -83
  5475. package/bundled-rules/yara-rules/custom/suspicious-scripts.yar +0 -72
  5476. package/bundled-rules/yara-rules/custom/webshells.yar +0 -61
  5477. package/dist/monitors/dpi-monitor.d.ts +0 -118
  5478. package/dist/monitors/dpi-monitor.d.ts.map +0 -1
  5479. package/dist/monitors/dpi-monitor.js +0 -512
  5480. package/dist/monitors/dpi-monitor.js.map +0 -1
  5481. package/dist/monitors/falco-monitor.d.ts +0 -62
  5482. package/dist/monitors/falco-monitor.d.ts.map +0 -1
  5483. package/dist/monitors/falco-monitor.js +0 -226
  5484. package/dist/monitors/falco-monitor.js.map +0 -1
  5485. package/dist/monitors/memory-scanner.d.ts +0 -108
  5486. package/dist/monitors/memory-scanner.d.ts.map +0 -1
  5487. package/dist/monitors/memory-scanner.js +0 -396
  5488. package/dist/monitors/memory-scanner.js.map +0 -1
  5489. package/dist/monitors/rootkit-detector.d.ts +0 -126
  5490. package/dist/monitors/rootkit-detector.d.ts.map +0 -1
  5491. package/dist/monitors/rootkit-detector.js +0 -517
  5492. package/dist/monitors/rootkit-detector.js.map +0 -1
  5493. package/dist/monitors/suricata-monitor.d.ts +0 -80
  5494. package/dist/monitors/suricata-monitor.d.ts.map +0 -1
  5495. package/dist/monitors/suricata-monitor.js +0 -227
  5496. package/dist/monitors/suricata-monitor.js.map +0 -1
  5497. package/dist/monitors/syscall-monitor.d.ts +0 -116
  5498. package/dist/monitors/syscall-monitor.d.ts.map +0 -1
  5499. package/dist/monitors/syscall-monitor.js +0 -537
  5500. package/dist/monitors/syscall-monitor.js.map +0 -1
@@ -1 +1 @@
1
- {"version":3,"file":"atr-action-handlers.d.ts","sourceRoot":"","sources":["../../src/agent/atr-action-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAO3E;;;;GAIG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,gBAAgB,CAAsC;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,EAAE,MAAM;IAI3B;;;OAGG;IACH,mBAAmB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI;IAKzD;;;;OAIG;IACG,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAiBhE;;;;OAIG;IACG,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAqFhE;;;;OAIG;IACG,iBAAiB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IA4CxE;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IA4ClE;;;;OAIG;IACG,iBAAiB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAiDxE,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,gBAAgB;IASxB;;OAEG;YACW,WAAW;CAY1B"}
1
+ {"version":3,"file":"atr-action-handlers.d.ts","sourceRoot":"","sources":["../../src/agent/atr-action-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAO3E;;;;GAIG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,gBAAgB,CAAsC;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,EAAE,MAAM;IAI3B;;;OAGG;IACH,mBAAmB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI;IAKzD;;;;OAIG;IACG,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IA6ChE;;;;OAIG;IACG,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAqFhE;;;;OAIG;IACG,iBAAiB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IA8CxE;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IA4ClE;;;;OAIG;IACG,iBAAiB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAmDxE,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,gBAAgB;IASxB;;OAEG;YACW,WAAW;CAY1B"}
@@ -38,11 +38,40 @@ export class ATRActionHandlers {
38
38
  async blockTool(verdict) {
39
39
  const toolName = this.extractToolName(verdict);
40
40
  const label = toolName ?? 'unknown';
41
- logger.info(`ATR action: block_tool for tool "${label}"`);
41
+ // Write to shared blocklist so MCP proxy can enforce the block
42
+ // Atomic write (tmp + rename) prevents corrupt reads; lowercase for consistent matching
43
+ try {
44
+ const { readFileSync, writeFileSync, renameSync, mkdirSync } = await import('node:fs');
45
+ const { join } = await import('node:path');
46
+ const blocklistPath = join(this.dataDir, 'blocked-tools.json');
47
+ const normalised = label.toLowerCase();
48
+ let blocklist = [];
49
+ try {
50
+ blocklist = JSON.parse(readFileSync(blocklistPath, 'utf-8'));
51
+ }
52
+ catch {
53
+ /* file may not exist */
54
+ }
55
+ if (!blocklist.includes(normalised)) {
56
+ blocklist.push(normalised);
57
+ // Cap at 500 entries — evict oldest
58
+ if (blocklist.length > 500) {
59
+ blocklist = blocklist.slice(-500);
60
+ }
61
+ mkdirSync(this.dataDir, { recursive: true });
62
+ const tmpPath = `${blocklistPath}.tmp.${process.pid}`;
63
+ writeFileSync(tmpPath, JSON.stringify(blocklist, null, 2), 'utf-8');
64
+ renameSync(tmpPath, blocklistPath);
65
+ }
66
+ }
67
+ catch {
68
+ // best effort — proxy still has its own ATR detection
69
+ }
70
+ logger.warn(`ATR action: block_tool — tool "${label}" added to blocklist`);
42
71
  return {
43
72
  action: 'block_tool',
44
73
  success: true,
45
- details: `Tool "${label}" blocked by ATR rule. ` +
74
+ details: `Tool "${label}" blocked. Added to blocklist for MCP proxy enforcement. ` +
46
75
  `Conclusion: ${verdict.conclusion}, confidence: ${verdict.confidence}%`,
47
76
  timestamp: new Date().toISOString(),
48
77
  target: label,
@@ -153,11 +182,11 @@ export class ATRActionHandlers {
153
182
  const safeLabel = sanitizeFilename(label);
154
183
  const markerPath = join(quarantineDir, `${safeLabel}.json`);
155
184
  writeFileSync(markerPath, JSON.stringify(marker, null, 2), 'utf-8');
156
- logger.info(`ATR action: session "${label}" quarantined`);
185
+ logger.warn(`ATR alert: session "${label}" flagged for quarantine (marker written, no enforcement)`);
157
186
  return {
158
187
  action: 'quarantine_session',
159
188
  success: true,
160
- details: `Session "${label}" quarantined. Marker written to ${markerPath}`,
189
+ details: `Session "${label}" flagged for quarantine (marker: ${markerPath}). Manual review required.`,
161
190
  timestamp: new Date().toISOString(),
162
191
  target: label,
163
192
  };
@@ -239,11 +268,11 @@ export class ATRActionHandlers {
239
268
  const safeLabel = sanitizeFilename(label);
240
269
  const overridePath = join(configDir, `${safeLabel}.json`);
241
270
  writeFileSync(overridePath, JSON.stringify(override, null, 2), 'utf-8');
242
- logger.info(`ATR action: permissions reduced for "${label}"`);
271
+ logger.warn(`ATR alert: permissions reduction requested for "${label}" (marker written, no enforcement)`);
243
272
  return {
244
273
  action: 'reduce_permissions',
245
274
  success: true,
246
- details: `Permissions reduced for "${label}". Override written to ${overridePath}`,
275
+ details: `Permission reduction flagged for "${label}" (marker: ${overridePath}). Manual review required.`,
247
276
  timestamp: new Date().toISOString(),
248
277
  target: label,
249
278
  };
@@ -1 +1 @@
1
- {"version":3,"file":"atr-action-handlers.js","sourceRoot":"","sources":["../../src/agent/atr-action-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAInE,MAAM,MAAM,GAAG,YAAY,CAAC,4BAA4B,CAAC,CAAC;AAE1D,6CAA6C;AAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzF;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IACpB,gBAAgB,GAAiC,IAAI,CAAC;IAC7C,OAAO,CAAS;IAEjC,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,OAA8B;QAChD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,OAAsB;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,IAAI,SAAS,CAAC;QAEpC,MAAM,CAAC,IAAI,CAAC,oCAAoC,KAAK,GAAG,CAAC,CAAC;QAE1D,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,IAAI;YACb,OAAO,EACL,SAAS,KAAK,yBAAyB;gBACvC,eAAe,OAAO,CAAC,UAAU,iBAAiB,OAAO,CAAC,UAAU,GAAG;YACzE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,OAAsB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAE1C,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,mDAAmD;gBAC5D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,IAAI,OAAO,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAC;YAC5D,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,UAAU,OAAO,qCAAqC;gBAC/D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,OAAO;aAChB,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,EAAE,CAAC;YACR,iCAAiC;YACjC,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;gBACxB,OAAO;oBACL,MAAM,EAAE,YAAY;oBACpB,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,yBAAyB;oBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;iBACpB,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,yCAAyC,GAAG,cAAc,OAAO,IAAI,KAAK,GAAG,CAAC,CAAC;gBAE3F,+CAA+C;gBAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAClD,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;wBAC7B,MAAM,CAAC,IAAI,CAAC,6CAA6C,GAAG,EAAE,CAAC,CAAC;oBAClE,CAAC;oBAAC,MAAM,CAAC;wBACP,iDAAiD;oBACnD,CAAC;gBACH,CAAC;gBAED,OAAO;oBACL,MAAM,EAAE,YAAY;oBACpB,OAAO,EAAE,IAAI;oBACb,OAAO,EACL,aAAa,GAAG,cAAc,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE;wBACpE,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;iBACpB,CAAC;YACJ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC;gBACxD,OAAO;oBACL,MAAM,EAAE,YAAY;oBACpB,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,4BAA4B,GAAG,KAAK,GAAG,EAAE;oBAClD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;iBACpB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,MAAM,CAAC,IAAI,CAAC,iDAAiD,OAAO,sBAAsB,CAAC,CAAC;QAC5F,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,6BAA6B,OAAO,0CAA0C;YACvF,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,OAAO;SAChB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAsB;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,SAAS,IAAI,SAAS,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAE3C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;YACjE,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE9C,MAAM,MAAM,GAAG;gBACb,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACvC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;gBAC3E,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;YAC5D,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAEpE,MAAM,CAAC,IAAI,CAAC,wBAAwB,KAAK,eAAe,CAAC,CAAC;YAE1D,OAAO;gBACL,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,YAAY,KAAK,oCAAoC,UAAU,EAAE;gBAC1E,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC;YAChE,OAAO;gBACL,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,iCAAiC,KAAK,MAAM,GAAG,EAAE;gBAC1D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,OAAsB;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,8CAA8C;gBACvD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACxE,OAAO;gBACL,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,wBAAwB,SAAS,oCAAoC;gBAC9E,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,SAAS;aAClB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAC1C,SAAS,EACT,uBAAuB,OAAO,CAAC,UAAU,iBAAiB,OAAO,CAAC,UAAU,IAAI,CACjF,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,sBAAsB,SAAS,0BAA0B,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,sBAAsB,SAAS,gCAAgC,CAAC,CAAC;QAC/E,CAAC;QAED,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,UAAU,SAAS,0BAA0B;gBAC/C,CAAC,CAAC,UAAU,SAAS,mCAAmC;YAC1D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAsB;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,SAAS,IAAI,OAAO,IAAI,SAAS,CAAC;QAEhD,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAE3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;YAC7D,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE1C,MAAM,QAAQ,GAAG;gBACf,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;gBAC3E,YAAY,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,cAAc,CAAC;aAC1D,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;YAC1D,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAExE,MAAM,CAAC,IAAI,CAAC,wCAAwC,KAAK,GAAG,CAAC,CAAC;YAE9D,OAAO;gBACL,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,4BAA4B,KAAK,0BAA0B,YAAY,EAAE;gBAClF,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC;YACpE,OAAO;gBACL,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,qCAAqC,KAAK,MAAM,GAAG,EAAE;gBAC9D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAEtE,eAAe,CAAC,OAAsB;QAC5C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAA2C,CAAC;YAC3D,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAW,CAAC;YAC5D,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAW,CAAC;YAC1D,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAW,CAAC;QAC9D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,cAAc,CAAC,OAAsB;QAC3C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAA2C,CAAC;YAC3D,IAAI,IAAI,EAAE,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAW,CAAC;YACxD,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAW,CAAC;QAC5D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,eAAe,CAAC,OAAsB;QAC5C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAA2C,CAAC;YAC3D,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YACxD,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,gBAAgB,CAAC,OAAsB;QAC7C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAA2C,CAAC;YAC3D,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAW,CAAC;YAC5D,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAW,CAAC;QAChE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,SAAiB;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACrB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
1
+ {"version":3,"file":"atr-action-handlers.js","sourceRoot":"","sources":["../../src/agent/atr-action-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAInE,MAAM,MAAM,GAAG,YAAY,CAAC,4BAA4B,CAAC,CAAC;AAE1D,6CAA6C;AAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzF;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IACpB,gBAAgB,GAAiC,IAAI,CAAC;IAC7C,OAAO,CAAS;IAEjC,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,OAA8B;QAChD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,OAAsB;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,IAAI,SAAS,CAAC;QAEpC,+DAA+D;QAC/D,wFAAwF;QACxF,IAAI,CAAC;YACH,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YACvF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YACvC,IAAI,SAAS,GAAa,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAa,CAAC;YAC3E,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC3B,oCAAoC;gBACpC,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBAC3B,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;gBACpC,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7C,MAAM,OAAO,GAAG,GAAG,aAAa,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;gBACtD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACpE,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,kCAAkC,KAAK,sBAAsB,CAAC,CAAC;QAE3E,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,IAAI;YACb,OAAO,EACL,SAAS,KAAK,2DAA2D;gBACzE,eAAe,OAAO,CAAC,UAAU,iBAAiB,OAAO,CAAC,UAAU,GAAG;YACzE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,OAAsB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAE1C,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,mDAAmD;gBAC5D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,IAAI,OAAO,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAC;YAC5D,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,UAAU,OAAO,qCAAqC;gBAC/D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,OAAO;aAChB,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,EAAE,CAAC;YACR,iCAAiC;YACjC,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;gBACxB,OAAO;oBACL,MAAM,EAAE,YAAY;oBACpB,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,yBAAyB;oBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;iBACpB,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,yCAAyC,GAAG,cAAc,OAAO,IAAI,KAAK,GAAG,CAAC,CAAC;gBAE3F,+CAA+C;gBAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAClD,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;wBAC7B,MAAM,CAAC,IAAI,CAAC,6CAA6C,GAAG,EAAE,CAAC,CAAC;oBAClE,CAAC;oBAAC,MAAM,CAAC;wBACP,iDAAiD;oBACnD,CAAC;gBACH,CAAC;gBAED,OAAO;oBACL,MAAM,EAAE,YAAY;oBACpB,OAAO,EAAE,IAAI;oBACb,OAAO,EACL,aAAa,GAAG,cAAc,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE;wBACpE,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;iBACpB,CAAC;YACJ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC;gBACxD,OAAO;oBACL,MAAM,EAAE,YAAY;oBACpB,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,4BAA4B,GAAG,KAAK,GAAG,EAAE;oBAClD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;iBACpB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,MAAM,CAAC,IAAI,CAAC,iDAAiD,OAAO,sBAAsB,CAAC,CAAC;QAC5F,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,6BAA6B,OAAO,0CAA0C;YACvF,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,OAAO;SAChB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAsB;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,SAAS,IAAI,SAAS,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAE3C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;YACjE,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE9C,MAAM,MAAM,GAAG;gBACb,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACvC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;gBAC3E,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;YAC5D,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAEpE,MAAM,CAAC,IAAI,CACT,uBAAuB,KAAK,2DAA2D,CACxF,CAAC;YAEF,OAAO;gBACL,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,YAAY,KAAK,qCAAqC,UAAU,4BAA4B;gBACrG,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC;YAChE,OAAO;gBACL,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,iCAAiC,KAAK,MAAM,GAAG,EAAE;gBAC1D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,OAAsB;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,8CAA8C;gBACvD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACxE,OAAO;gBACL,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,wBAAwB,SAAS,oCAAoC;gBAC9E,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,SAAS;aAClB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAC1C,SAAS,EACT,uBAAuB,OAAO,CAAC,UAAU,iBAAiB,OAAO,CAAC,UAAU,IAAI,CACjF,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,sBAAsB,SAAS,0BAA0B,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,sBAAsB,SAAS,gCAAgC,CAAC,CAAC;QAC/E,CAAC;QAED,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,UAAU,SAAS,0BAA0B;gBAC/C,CAAC,CAAC,UAAU,SAAS,mCAAmC;YAC1D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAsB;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,SAAS,IAAI,OAAO,IAAI,SAAS,CAAC;QAEhD,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAE3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;YAC7D,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE1C,MAAM,QAAQ,GAAG;gBACf,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;gBAC3E,YAAY,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,cAAc,CAAC;aAC1D,CAAC;YAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;YAC1D,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAExE,MAAM,CAAC,IAAI,CACT,mDAAmD,KAAK,oCAAoC,CAC7F,CAAC;YAEF,OAAO;gBACL,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,qCAAqC,KAAK,cAAc,YAAY,4BAA4B;gBACzG,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC;YACpE,OAAO;gBACL,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,qCAAqC,KAAK,MAAM,GAAG,EAAE;gBAC9D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAEtE,eAAe,CAAC,OAAsB;QAC5C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAA2C,CAAC;YAC3D,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAW,CAAC;YAC5D,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAW,CAAC;YAC1D,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAW,CAAC;QAC9D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,cAAc,CAAC,OAAsB;QAC3C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAA2C,CAAC;YAC3D,IAAI,IAAI,EAAE,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAW,CAAC;YACxD,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAW,CAAC;QAC5D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,eAAe,CAAC,OAAsB;QAC5C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAA2C,CAAC;YAC3D,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YACxD,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,gBAAgB,CAAC,OAAsB;QAC7C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,IAA2C,CAAC;YAC3D,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAW,CAAC;YAC5D,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAW,CAAC;QAChE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,SAAiB;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACrB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
@@ -399,7 +399,7 @@ export class ReportAgent {
399
399
  attackSourceIP,
400
400
  attackType: event.category,
401
401
  mitreTechnique: verdict.mitreTechnique ?? 'unknown',
402
- sigmaRuleMatched: ruleMatched,
402
+ ruleMatched,
403
403
  timestamp: new Date().toISOString(),
404
404
  region: getCountryCode(),
405
405
  ...(atrRuleIds.length > 0 && { atrRulesMatched: atrRuleIds.join(',') }),
@@ -1 +1 @@
1
- {"version":3,"file":"report-agent.js","sourceRoot":"","sources":["../../src/agent/report-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,cAAc,EACd,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,WAAW,EACX,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AASjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,MAAM,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAC;AAgC3D,MAAM,gBAAgB,GAAmB;IACvC,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;IAC3C,eAAe,EAAE,EAAE;IACnB,aAAa,EAAE,EAAE;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,WAAW;IACL,OAAO,CAAS;IACzB,IAAI,CAAY;IAChB,WAAW,GAAG,CAAC,CAAC;IACP,QAAQ,CAAiB;IAE1C,YAAY,OAAe,EAAE,IAAe,EAAE,QAAkC;QAC9E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,gBAAgB,EAAE,GAAG,QAAQ,EAAE,CAAC;QAErD,8BAA8B;QAC9B,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,OAAO,CAAC,IAAe;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,MAAM,CACJ,KAAoB,EACpB,OAAsB,EACtB,QAAwB,EACxB,QAA6B;QAE7B,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,kDAAkD;QAClD,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,uBAAuB;QACvB,MAAM,MAAM,GAAiB;YAC3B,KAAK;YACL,OAAO;YACP,QAAQ;YACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEvB,+DAA+D;QAC/D,IAAI,eAAe,GAAG,QAAQ,CAAC;QAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,eAAe,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAED,qEAAqE;QACrE,IAAI,cAAgD,CAAC;QACrD,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACpC,cAAc,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,CAAC,IAAI,CACT,WAAW,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,UAAU,GAAG;YACnD,YAAY,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,OAAO,GAAG,CAC/D,CAAC;QAEF,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;IAC7C,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAE9E;;;;OAIG;IACK,cAAc;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB;gBAAE,OAAO;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,6CAA6C;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,wCAAwC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,SAAS,CAAC,CAAC;QAE7F,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEpC,0DAA0D;QAC1D,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YACvC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAE9E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;YAEvE,gCAAgC;YAChC,MAAM,QAAQ,GAAG,KAAK;iBACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;YAC1B,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;iBAC5B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YAEjC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;oBAC9C,IAAI,CAAC;wBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;wBAClC,MAAM,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,IAAI,8BAA8B,CAAC,CAAC;oBAC9E,CAAC;oBAAC,MAAM,CAAC;wBACP,eAAe;oBACjB,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,6CAA6C;gBAC7C,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC7C,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;wBAC1B,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;wBAClC,MAAM,CAAC,IAAI,CACT,sBAAsB,KAAK,CAAC,IAAI,gBAAgB,IAAI,CAAC,QAAQ,CAAC,aAAa,QAAQ,CACpF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,eAAe;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAEtE,SAAS,CAAC,MAAoB;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YAC3C,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,0CAA0C;IAC1C,8EAA8E;IAE9E;;;;OAIG;IACH,KAAK,CAAC,uBAAuB,CAAC,KAAW;QACvC,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEpC,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,WAAW;QACjB,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC;iBAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;iBACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;YACrC,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;iBAC5B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;iBAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAEtB,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,QAAgB,EAAE,KAAW;QAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,OAAO,GAAmB,EAAE,CAAC;YAEnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBACjE,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAEnE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBACrB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;wBAAE,OAAO;oBACzB,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;wBAChD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,EAAE,CAAC;4BACxC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACvB,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,uBAAuB;oBACzB,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,OAAO,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,0CAA0C;IAC1C,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,MAAM,gBAAgB,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACpE,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;gBACzF,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,CAAC;YAED,IACE,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAChC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,EAClB,CAAC;gBACD,cAAc,EAAE,CAAC;YACnB,CAAC;YAED,MAAM,EAAE,GACL,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY;gBACzC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY,CAAC;YAClD,IAAI,EAAE,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC9B,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,gBAAgB,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;aAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEzC,MAAM,YAAY,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAE/F,OAAO;YACL,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE;YAC/D,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,cAAc;YACd,gBAAgB,EAAE,gBAAgB,CAAC,UAAU;YAC7C,YAAY,EAAE,gBAAgB,CAAC,MAAM;YACrC,gBAAgB;YAChB,YAAY;YACZ,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,oBAAoB;QACxB,OAAO,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,qBAAqB;QACzB,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,SAAiB;QACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,MAAM,gBAAgB,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACpE,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;gBACzF,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,CAAC;YACD,IACE,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAChC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,EAClB,CAAC;gBACD,cAAc,EAAE,CAAC;YACnB,CAAC;YACD,MAAM,EAAE,GACL,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY;gBACzC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY,CAAC;YAClD,IAAI,EAAE,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtF,CAAC;QAED,OAAO;YACL,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE;YAC/D,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,cAAc;YACd,gBAAgB,EAAE,gBAAgB,CAAC,UAAU;YAC7C,YAAY,EAAE,gBAAgB,CAAC,MAAM;YACrC,gBAAgB,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;iBACtC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACxC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACvF,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,gDAAgD;IACxC,kBAAkB,CAAC,KAAW;QACpC,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;oBAChD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,EAAE,CAAC;wBACxC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACvB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8EAA8E;IAC9E,6BAA6B;IAC7B,8EAA8E;IAEtE,sBAAsB,CAC5B,KAAoB,EACpB,OAAsB;QAEtB,MAAM,KAAK,GACR,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY;YACvC,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY;YAC7C,SAAS,CAAC;QACZ,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAE1C,8EAA8E;QAC9E,MAAM,WAAW,GACf,OAAO,CAAC,QAAQ;aACb,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,IAAgC,EAAE,CAAC,QAAQ,CAAW,CAAC;aACrE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;QAEzB,gEAAgE;QAChE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,IAAgC,EAAE,CAAC,QAAQ,CAAW,CAAC;aACrE,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ;aACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,IAAgC,EAAE,CAAC,UAAU,CAAW,CAAC;aACvE,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnB,OAAO;YACL,cAAc;YACd,UAAU,EAAE,KAAK,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,SAAS;YACnD,gBAAgB,EAAE,WAAW;YAC7B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,cAAc,EAAE;YACxB,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,yCAAyC;IACzC,eAAe;QACb,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,mBAAmB;QACjB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,cAAc;IACrB,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC5D,MAAM,YAAY,GAA2B;QAC3C,aAAa,EAAE,IAAI;QACnB,YAAY,EAAE,IAAI;QAClB,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,IAAI;QACrB,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,IAAI;QACtB,kBAAkB,EAAE,IAAI;QACxB,iBAAiB,EAAE,IAAI;QACvB,gBAAgB,EAAE,IAAI;QACtB,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,IAAI;QACrB,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,IAAI;QACpB,kBAAkB,EAAE,IAAI;KACzB,CAAC;IACF,OAAO,YAAY,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,EAAU;IAC7B,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEhC,uCAAuC;IACvC,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACjB,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACjB,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,+BAA+B;IAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAClC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAClC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}
1
+ {"version":3,"file":"report-agent.js","sourceRoot":"","sources":["../../src/agent/report-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,cAAc,EACd,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,WAAW,EACX,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AASjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,MAAM,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAC;AAgC3D,MAAM,gBAAgB,GAAmB;IACvC,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;IAC3C,eAAe,EAAE,EAAE;IACnB,aAAa,EAAE,EAAE;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,WAAW;IACL,OAAO,CAAS;IACzB,IAAI,CAAY;IAChB,WAAW,GAAG,CAAC,CAAC;IACP,QAAQ,CAAiB;IAE1C,YAAY,OAAe,EAAE,IAAe,EAAE,QAAkC;QAC9E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,gBAAgB,EAAE,GAAG,QAAQ,EAAE,CAAC;QAErD,8BAA8B;QAC9B,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,OAAO,CAAC,IAAe;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,MAAM,CACJ,KAAoB,EACpB,OAAsB,EACtB,QAAwB,EACxB,QAA6B;QAE7B,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,kDAAkD;QAClD,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,uBAAuB;QACvB,MAAM,MAAM,GAAiB;YAC3B,KAAK;YACL,OAAO;YACP,QAAQ;YACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEvB,+DAA+D;QAC/D,IAAI,eAAe,GAAG,QAAQ,CAAC;QAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,eAAe,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAED,qEAAqE;QACrE,IAAI,cAAgD,CAAC;QACrD,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACpC,cAAc,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,CAAC,IAAI,CACT,WAAW,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,UAAU,GAAG;YACnD,YAAY,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,OAAO,GAAG,CAC/D,CAAC;QAEF,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;IAC7C,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAE9E;;;;OAIG;IACK,cAAc;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB;gBAAE,OAAO;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,6CAA6C;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,wCAAwC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,SAAS,CAAC,CAAC;QAE7F,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEpC,0DAA0D;QAC1D,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YACvC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAE9E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;YAEvE,gCAAgC;YAChC,MAAM,QAAQ,GAAG,KAAK;iBACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;YAC1B,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;iBAC5B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YAEjC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;oBAC9C,IAAI,CAAC;wBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;wBAClC,MAAM,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,IAAI,8BAA8B,CAAC,CAAC;oBAC9E,CAAC;oBAAC,MAAM,CAAC;wBACP,eAAe;oBACjB,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,6CAA6C;gBAC7C,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC7C,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;wBAC1B,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;wBAClC,MAAM,CAAC,IAAI,CACT,sBAAsB,KAAK,CAAC,IAAI,gBAAgB,IAAI,CAAC,QAAQ,CAAC,aAAa,QAAQ,CACpF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,eAAe;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAEtE,SAAS,CAAC,MAAoB;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YAC3C,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,0CAA0C;IAC1C,8EAA8E;IAE9E;;;;OAIG;IACH,KAAK,CAAC,uBAAuB,CAAC,KAAW;QACvC,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEpC,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,WAAW;QACjB,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC;iBAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;iBACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;YACrC,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;iBAC5B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;iBAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAEtB,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,QAAgB,EAAE,KAAW;QAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,OAAO,GAAmB,EAAE,CAAC;YAEnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBACjE,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAEnE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBACrB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;wBAAE,OAAO;oBACzB,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;wBAChD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,EAAE,CAAC;4BACxC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACvB,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,uBAAuB;oBACzB,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,OAAO,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,0CAA0C;IAC1C,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,MAAM,gBAAgB,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACpE,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;gBACzF,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,CAAC;YAED,IACE,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAChC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,EAClB,CAAC;gBACD,cAAc,EAAE,CAAC;YACnB,CAAC;YAED,MAAM,EAAE,GACL,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY;gBACzC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY,CAAC;YAClD,IAAI,EAAE,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC9B,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,gBAAgB,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;aAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEzC,MAAM,YAAY,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAE/F,OAAO;YACL,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE;YAC/D,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,cAAc;YACd,gBAAgB,EAAE,gBAAgB,CAAC,UAAU;YAC7C,YAAY,EAAE,gBAAgB,CAAC,MAAM;YACrC,gBAAgB;YAChB,YAAY;YACZ,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,oBAAoB;QACxB,OAAO,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,qBAAqB;QACzB,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,SAAiB;QACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,MAAM,gBAAgB,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACpE,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;gBACzF,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,CAAC;YACD,IACE,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAChC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,EAClB,CAAC;gBACD,cAAc,EAAE,CAAC;YACnB,CAAC;YACD,MAAM,EAAE,GACL,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY;gBACzC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY,CAAC;YAClD,IAAI,EAAE,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtF,CAAC;QAED,OAAO;YACL,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE;YAC/D,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,cAAc;YACd,gBAAgB,EAAE,gBAAgB,CAAC,UAAU;YAC7C,YAAY,EAAE,gBAAgB,CAAC,MAAM;YACrC,gBAAgB,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;iBACtC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACxC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACvF,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,gDAAgD;IACxC,kBAAkB,CAAC,KAAW;QACpC,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;oBAChD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,EAAE,CAAC;wBACxC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACvB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8EAA8E;IAC9E,6BAA6B;IAC7B,8EAA8E;IAEtE,sBAAsB,CAC5B,KAAoB,EACpB,OAAsB;QAEtB,MAAM,KAAK,GACR,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY;YACvC,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY;YAC7C,SAAS,CAAC;QACZ,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAE1C,8EAA8E;QAC9E,MAAM,WAAW,GACf,OAAO,CAAC,QAAQ;aACb,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,IAAgC,EAAE,CAAC,QAAQ,CAAW,CAAC;aACrE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;QAEzB,gEAAgE;QAChE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,IAAgC,EAAE,CAAC,QAAQ,CAAW,CAAC;aACrE,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ;aACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,IAAgC,EAAE,CAAC,UAAU,CAAW,CAAC;aACvE,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnB,OAAO;YACL,cAAc;YACd,UAAU,EAAE,KAAK,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,SAAS;YACnD,WAAW;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,cAAc,EAAE;YACxB,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,yCAAyC;IACzC,eAAe;QACb,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,mBAAmB;QACjB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,cAAc;IACrB,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC5D,MAAM,YAAY,GAA2B;QAC3C,aAAa,EAAE,IAAI;QACnB,YAAY,EAAE,IAAI;QAClB,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,IAAI;QACrB,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,IAAI;QACtB,kBAAkB,EAAE,IAAI;QACxB,iBAAiB,EAAE,IAAI;QACvB,gBAAgB,EAAE,IAAI;QACtB,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,IAAI;QACrB,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,IAAI;QACpB,kBAAkB,EAAE,IAAI;KACzB,CAAC;IACF,OAAO,YAAY,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,EAAU;IAC7B,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEhC,uCAAuC;IACvC,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACjB,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACjB,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,+BAA+B;IAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAClC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAClC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}
package/dist/cli/index.js CHANGED
@@ -88,7 +88,10 @@ async function commandStart(dataDir, verbose = false, managerUrl, noTelemetry =
88
88
  if (!verbose) {
89
89
  setLogLevel('silent');
90
90
  }
91
- console.log(banner(CLI_VERSION));
91
+ // When called from pga up, suppress the banner (pga up has its own output)
92
+ if (!process.env['PANGUARD_QUIET_GUARD']) {
93
+ console.log(banner(CLI_VERSION));
94
+ }
92
95
  const pidFile = new PidFile(dataDir);
93
96
  if (pidFile.isRunning()) {
94
97
  console.log(` ${symbols.warn} PanguardGuard is already running`);
@@ -120,59 +123,67 @@ async function commandStart(dataDir, verbose = false, managerUrl, noTelemetry =
120
123
  // Rule counts
121
124
  const rules = engine.getRuleCounts();
122
125
  const rulesSummary = `ATR: ${rules.atr}`;
123
- // Status box
124
- console.log(statusPanel('PANGUARD AI Guard Active', [
125
- { label: 'Status', value: c.safe('PROTECTED'), status: 'safe' },
126
- { label: 'PID', value: c.sage(String(process.pid)) },
127
- { label: 'Mode', value: c.sage(config.mode) },
128
- { label: 'Rules', value: c.sage(rulesSummary) },
129
- { label: 'Data Dir', value: c.dim(dataDir) },
130
- ...(config.dashboardEnabled
131
- ? [{ label: 'Dashboard', value: c.underline(`http://localhost:${config.dashboardPort}`) }]
132
- : []),
133
- ...(config.threatCloudEndpoint
134
- ? [{ label: 'Threat Cloud', value: c.dim(config.threatCloudEndpoint) }]
135
- : []),
136
- ]));
137
- // Threat intelligence sharing transparency message
138
- if (config.threatCloudUploadEnabled === false || config.telemetryEnabled === false) {
139
- console.log(` ${symbols.info} Threat intelligence sharing: ${c.dim('disabled')}`);
140
- console.log(` ${c.dim(' No data will be uploaded to Panguard Threat Cloud')}`);
126
+ // Status box (suppressed when called from pga up which has its own summary)
127
+ if (process.env['PANGUARD_QUIET_GUARD']) {
128
+ // Minimal output for pga up integration
129
+ console.log(` ${c.safe(symbols.pass)} Guard started (PID ${process.pid})`);
141
130
  }
142
131
  else {
143
- console.log(` ${symbols.info} Threat intelligence sharing: ${c.safe('enabled')}`);
144
- console.log(` ${c.dim(' Detected threats are anonymously uploaded to Panguard Threat Cloud')}`);
145
- console.log(` ${c.dim(' Disable: panguard-guard start --no-telemetry')}`);
146
- }
147
- if (config.showUploadData) {
148
- console.log(` ${symbols.info} Upload data preview: ${c.safe('enabled')}`);
149
- }
150
- console.log('');
151
- // Free tier: show what's enabled/disabled
152
- console.log(` ${c.safe('\u2713')} Auto-blocking: known attack patterns (Layer 1 rules)`);
153
- // Show AI layer status and setup guide if not configured
154
- const hasLocalAi = config.ai?.provider === 'ollama';
155
- const hasCloudAi = config.ai?.provider === 'claude' || config.ai?.provider === 'openai';
156
- const hasAnyAi = Boolean(config.ai?.provider);
157
- const hasEnvKey = Boolean(process.env['PANGUARD_AI_KEY'] ||
158
- process.env['ANTHROPIC_API_KEY'] ||
159
- process.env['OPENAI_API_KEY']);
160
- if (hasLocalAi) {
161
- console.log(` ${c.safe('\u2713')} Layer 2 Local AI: ${c.sage(config.ai?.provider + ' / ' + (config.ai?.model ?? 'default'))}`);
162
- }
163
- if (hasCloudAi || hasEnvKey) {
164
- const provider = config.ai?.provider ?? (process.env['ANTHROPIC_API_KEY'] ? 'anthropic' : 'openai');
165
- console.log(` ${c.safe('\u2713')} Layer 3 Cloud AI: ${c.sage(provider + ' connected')}`);
166
- }
167
- if (!hasAnyAi && !hasEnvKey) {
168
- console.log('');
169
- console.log(` ${symbols.info} Guard started with ${c.sage('Layer 1 (Pattern Detection)')} active.`);
132
+ console.log(statusPanel('PANGUARD AI Guard Active', [
133
+ { label: 'Status', value: c.safe('PROTECTED'), status: 'safe' },
134
+ { label: 'PID', value: c.sage(String(process.pid)) },
135
+ { label: 'Mode', value: c.sage(config.mode) },
136
+ { label: 'Rules', value: c.sage(rulesSummary) },
137
+ { label: 'Data Dir', value: c.dim(dataDir) },
138
+ ...(config.dashboardEnabled
139
+ ? [{ label: 'Dashboard', value: c.underline(`http://localhost:${config.dashboardPort}`) }]
140
+ : []),
141
+ ...(config.threatCloudEndpoint
142
+ ? [{ label: 'Threat Cloud', value: c.dim(config.threatCloudEndpoint) }]
143
+ : []),
144
+ ]));
145
+ // Threat intelligence sharing transparency message
146
+ if (config.threatCloudUploadEnabled === false || config.telemetryEnabled === false) {
147
+ console.log(` ${symbols.info} Threat intelligence sharing: ${c.dim('disabled')}`);
148
+ console.log(` ${c.dim(' No data will be uploaded to Panguard Threat Cloud')}`);
149
+ }
150
+ else {
151
+ console.log(` ${symbols.info} Threat intelligence sharing: ${c.safe('enabled')}`);
152
+ console.log(` ${c.dim(' Detected threats are anonymously uploaded to Panguard Threat Cloud')}`);
153
+ console.log(` ${c.dim(' Disable: panguard-guard start --no-telemetry')}`);
154
+ }
155
+ if (config.showUploadData) {
156
+ console.log(` ${symbols.info} Upload data preview: ${c.safe('enabled')}`);
157
+ }
170
158
  console.log('');
171
- printAiSetupGuide();
172
- }
159
+ // Free tier: show what's enabled/disabled
160
+ console.log(` ${c.safe('\u2713')} Auto-blocking: known attack patterns (Layer 1 rules)`);
161
+ // Show AI layer status and setup guide if not configured
162
+ const hasLocalAi = config.ai?.provider === 'ollama';
163
+ const hasCloudAi = config.ai?.provider === 'claude' || config.ai?.provider === 'openai';
164
+ const hasAnyAi = Boolean(config.ai?.provider);
165
+ const hasEnvKey = Boolean(process.env['PANGUARD_AI_KEY'] ||
166
+ process.env['ANTHROPIC_API_KEY'] ||
167
+ process.env['OPENAI_API_KEY']);
168
+ if (hasLocalAi) {
169
+ console.log(` ${c.safe('\u2713')} Layer 2 Local AI: ${c.sage(config.ai?.provider + ' / ' + (config.ai?.model ?? 'default'))}`);
170
+ }
171
+ if (hasCloudAi || hasEnvKey) {
172
+ const provider = config.ai?.provider ?? (process.env['ANTHROPIC_API_KEY'] ? 'anthropic' : 'openai');
173
+ console.log(` ${c.safe('\u2713')} Layer 3 Cloud AI: ${c.sage(provider + ' connected')}`);
174
+ }
175
+ if (!hasAnyAi && !hasEnvKey) {
176
+ console.log('');
177
+ console.log(` ${symbols.info} Guard started with ${c.sage('Layer 1 (Pattern Detection)')} active.`);
178
+ console.log('');
179
+ printAiSetupGuide();
180
+ }
181
+ } // end of PANGUARD_QUIET_GUARD else block
173
182
  // ── First-run welcome / 首次啟動歡迎 ──────────────────────────────
174
- await showFirstRunWelcome(config.dashboardPort);
175
- console.log(` ${symbols.info} Monitoring...`);
183
+ if (!process.env['PANGUARD_QUIET_GUARD']) {
184
+ await showFirstRunWelcome(config.dashboardPort);
185
+ console.log(` ${symbols.info} Monitoring...`);
186
+ }
176
187
  console.log('');
177
188
  // ── TUI Dashboard mode ──────────────────────────────────────────────
178
189
  const dashboardRenderer = dashboardMode ? new DashboardRenderer(5000) : null;
@@ -398,7 +409,9 @@ async function commandStart(dataDir, verbose = false, managerUrl, noTelemetry =
398
409
  const uploaded = Number(data['uploaded'] ?? 0);
399
410
  // Feed daily summary
400
411
  dailySummary.recordEvent();
401
- console.log(c.dim(` [${time}] Events: ${events.toLocaleString()} | Threats: ${threats} | Uploaded: ${uploaded}`));
412
+ if (!process.env['PANGUARD_QUIET_GUARD']) {
413
+ console.log(c.dim(` [${time}] Events: ${events.toLocaleString()} | Threats: ${threats} | Uploaded: ${uploaded}`));
414
+ }
402
415
  }
403
416
  else if (type === 'threat') {
404
417
  const time = new Date().toLocaleTimeString('en-US', { hour12: false });
@@ -438,8 +451,10 @@ async function commandStart(dataDir, verbose = false, managerUrl, noTelemetry =
438
451
  }
439
452
  }
440
453
  });
441
- console.log(c.dim(' Press Ctrl+C to stop'));
442
- console.log('');
454
+ if (!process.env['PANGUARD_QUIET_GUARD']) {
455
+ console.log(c.dim(' Press Ctrl+C to stop'));
456
+ console.log('');
457
+ }
443
458
  }
444
459
  }
445
460
  // ---------------------------------------------------------------------------
@@ -494,8 +509,10 @@ async function showFirstRunWelcome(dashboardPort) {
494
509
  }
495
510
  }
496
511
  // ---------------------------------------------------------------------------
497
- /** Print bilingual AI layer setup instructions */
512
+ /** Print bilingual AI layer setup instructions (skipped when called from pga up) */
498
513
  function printAiSetupGuide() {
514
+ if (process.env['PANGUARD_QUIET_GUARD'])
515
+ return;
499
516
  const configDir = join(homedir(), '.panguard');
500
517
  console.log(` To enable AI-powered detection layers:`);
501
518
  console.log('');
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EACL,CAAC,EACD,MAAM,EACN,MAAM,EACN,OAAO,EACP,OAAO,EACP,WAAW,EACX,OAAO,EACP,WAAW,EACX,aAAa,EACb,YAAY,EACZ,UAAU,GACX,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,oBAAoB,CAAwB,CAAC;AACnE,2BAA2B;AAC3B,MAAM,CAAC,MAAM,WAAW,GAAW,IAAI,CAAC,OAAO,CAAC;AAEhD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAClC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,gBAAgB,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAE3D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,MAAM,YAAY,CAChB,OAAO,EACP,OAAO,EACP,UAAU,EACV,WAAW,EACX,cAAc,EACd,SAAS,EACT,WAAW,CACZ,CAAC;YACF,MAAM;QACR,KAAK,MAAM;YACT,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM;QACR,KAAK,QAAQ;YACX,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM;QACR,KAAK,SAAS;YACZ,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;YAC9B,MAAM;QACR,KAAK,WAAW;YACd,MAAM,gBAAgB,EAAE,CAAC;YACzB,MAAM;QACR,KAAK,QAAQ;YACX,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM;QACR,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAkC,CAAC;YACjE,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvF,MAAM;QACR,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpB,MAAM;QACR,CAAC;QACD,KAAK,UAAU;YACb,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;YAC9B,MAAM;QACR,KAAK,MAAM;YACT,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM;QACR,KAAK,MAAM,CAAC;QACZ;YACE,SAAS,EAAE,CAAC;YACZ,MAAM;IACV,CAAC;AACH,CAAC;AAED,sCAAsC;AACtC,KAAK,UAAU,YAAY,CACzB,OAAe,EACf,OAAO,GAAG,KAAK,EACf,UAAmB,EACnB,WAAW,GAAG,KAAK,EACnB,cAAc,GAAG,KAAK,EACtB,aAAa,GAAG,KAAK,EACrB,eAAe,GAAG,KAAK;IAEvB,oDAAoD;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAEjC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,mCAAmC,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IAExD,4DAA4D;IAC5D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,wBAAwB,GAAG,KAAK,CAAC;QACxC,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAClC,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,iCAAiC,CAAC,CAAC;QAClE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAE7C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAEpC,cAAc;IACd,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC;IAEzC,aAAa;IACb,OAAO,CAAC,GAAG,CACT,WAAW,CAAC,0BAA0B,EAAE;QACtC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;QAC/D,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE;QACpD,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QAC7C,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;QAC/C,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC5C,GAAG,CAAC,MAAM,CAAC,gBAAgB;YACzB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,oBAAoB,MAAM,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;YAC1F,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,mBAAmB;YAC5B,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACvE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CACH,CAAC;IAEF,mDAAmD;IACnD,IAAI,MAAM,CAAC,wBAAwB,KAAK,KAAK,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,iCAAiC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,qDAAqD,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,iCAAiC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,sEAAsE,CAAC,EAAE,CACrF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gDAAgD,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,yBAAyB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,0CAA0C;IAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,uDAAuD,CAAC,CAAC;IAE1F,yDAAyD;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,EAAE,QAAQ,KAAK,QAAQ,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,EAAE,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,EAAE,QAAQ,KAAK,QAAQ,CAAC;IACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CACvB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAC9B,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,SAAS,CAAC,CAAC,EAAE,CACnH,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GACZ,MAAM,CAAC,EAAE,EAAE,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,IAAI,uBAAuB,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,UAAU,CACxF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,iBAAiB,EAAE,CAAC;IACtB,CAAC;IAED,+DAA+D;IAC/D,MAAM,mBAAmB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEhD,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,gBAAgB,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,uEAAuE;IACvE,MAAM,iBAAiB,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7E,sEAAsE;IACtE,MAAM,WAAW,GAAG,MAAM,CAAC,mBAAmB,IAAI,wBAAwB,CAAC;IAC3E,MAAM,cAAc,GAMf,EAAE,CAAC;IACR,IAAI,mBAAmB,GAAyC,IAAI,CAAC;IACrE,IAAI,yBAAyB,GAAyC,IAAI,CAAC;IAC3E,MAAM,oBAAoB,GAAa,EAAE,CAAC;IAE1C,SAAS,mBAAmB;QAC1B,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACxC,MAAM,KAAK,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;QAClC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,KAAK,KAAK,CAAC,GAAG,WAAW,gBAAgB,EAAE;oBACzC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC9D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBACZ,iBAAiB;gBACnB,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,sBAAsB;QAC7B,IAAI,mBAAmB;YAAE,OAAO;QAChC,mBAAmB,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,mBAAmB,GAAG,IAAI,CAAC;YAC3B,mBAAmB,EAAE,CAAC;QACxB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB;IAChC,CAAC;IAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,YAAoB,EAAE,QAAgB;QAC/E,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK;YAAE,OAAO;QAC9C,cAAc,CAAC,IAAI,CAAC;YAClB,KAAK;YACL,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;YAC/C,UAAU,EAAE,CAAC,EAAE,0CAA0C;YACzD,YAAY;YACZ,QAAQ;SACT,CAAC,CAAC;QACH,sBAAsB,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,OAAe;QACtD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO;QAC1C,oBAAoB,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC;QAClD,IAAI,yBAAyB;YAAE,YAAY,CAAC,yBAAyB,CAAC,CAAC;QACvE,yBAAyB,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1C,yBAAyB,GAAG,IAAI,CAAC;YACjC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACzE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,sBAAsB,CAAC;YACpF,KAAK,MAAM,CAAC,oBAAoB,CAAC;iBAC9B,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACrB,IAAI,CAAC;oBACH,QAAQ,CACN,uCAAuC,QAAQ,IAAI,EAAE,0BAA0B,EAC/E,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,qCAAqC;gBACvC,CAAC;YACH,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrB,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,cAAc;IAC3B,CAAC;IAED,wEAAwE;IACxE,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC;QACpC,YAAY,EAAE,MAAM;QACpB,YAAY,EAAE,MAAM,CAAC,uBAAuB,EAAE;QAC9C,iBAAiB,EAAE,MAAM,CAAC,uBAAuB,EAAE;KACpD,CAAC,CAAC;IAEH,YAAY,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,MAA4C,EAAE,EAAE;QAC9E,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,iBAAiB,EAAE,CAAC;YACtB,iBAAiB,CAAC,SAAS,CAAC;gBAC1B,IAAI;gBACJ,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,kBAAkB,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,UAAU,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,UAAU,EAAE,CACrG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAA4C,EAAE,EAAE;QAChF,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,iBAAiB,EAAE,CAAC;YACtB,iBAAiB,CAAC,SAAS,CAAC;gBAC1B,IAAI;gBACJ,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,kBAAkB,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,UAAU,EAAE;aACnE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,mBAAmB,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,UAAU,EAAE,CAClG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,EAAE,CACb,sBAAsB,EACtB,CAAC,MAAwF,EAAE,EAAE;QAC3F,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,IAAI,GACR,MAAM,CAAC,SAAS,KAAK,KAAK;YACxB,CAAC,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ;gBAC7B,CAAC,CAAC,OAAO,CAAC,IAAI;gBACd,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACrB,MAAM,SAAS,GACb,MAAM,CAAC,SAAS,KAAK,KAAK;YACxB,CAAC,CAAC,CAAC,CAAC,IAAI;YACR,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ;gBAC7B,CAAC,CAAC,CAAC,CAAC,OAAO;gBACX,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAEnB,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe;gBACtC,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,iBAAiB,CAAC,SAAS,CAAC;gBAC1B,IAAI;gBACJ,IAAI;gBACJ,OAAO,EAAE,gBAAgB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE;aACjF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CACT,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,SAAS,OAAO,CACpH,CAAC;YACF,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,mBAAmB,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,kBAAkB,CAAC,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACnE,gBAAgB,CACd,aAAa,EACb,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,OAAO,CAChE,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC;IAE1B,sEAAsE;IACtE,MAAM,YAAY,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACxD,YAAY,CAAC,KAAK,EAAE,CAAC;IAErB,uEAAuE;IACvE,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1E,yEAAyE;IACzE,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IAClC,MAAM,gBAAgB,GAAG,KAAK,IAAI,EAAE;QAClC,IAAI,mBAAmB;YAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC;QAC3D,mBAAmB,EAAE,CAAC;QACtB,IAAI,yBAAyB;YAAE,YAAY,CAAC,yBAAyB,CAAC,CAAC;QACvE,YAAY,CAAC,IAAI,EAAE,CAAC;QACpB,YAAY,CAAC,IAAI,EAAE,CAAC;QACpB,IAAI,iBAAiB;YAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,gBAAgB,EAAE,CAAC;IAC3B,CAAC,CAAC;IACF,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,gBAAgB,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,gBAAgB,EAAE,CAAC,CAAC;IAErD,uEAAuE;IACvE,IAAI,iBAAiB,EAAE,CAAC;QACtB,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,GAAmB,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,OAAO;oBACpB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;wBAC1B,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,WAAW;oBACf,CAAC,CAAC,SAAS;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,UAAU,EAAE,KAAK;gBACjB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,CAAC;gBAChD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC;gBACxC,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ;gBAC/B,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK;gBACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;aAC1C,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,iBAAiB,CAAC,UAAU,CAAC;oBAC3B,IAAI;oBACJ,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;oBAC/C,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;oBAC7C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;oBAC3C,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;iBACzC,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,iBAAiB,CAAC,SAAS,CAAC;oBAC1B,IAAI;oBACJ,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,cAAc,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,SAAS;iBACtF,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;SAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACpB,+EAA+E;QAC/E,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACrC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,IAAI,GAAG,GAAG,cAAc,GAAG,MAAM;oBAAE,OAAO;gBAC1C,cAAc,GAAG,GAAG,CAAC;gBACrB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBAE/C,qBAAqB;gBACrB,YAAY,CAAC,WAAW,EAAE,CAAC;gBAE3B,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,GAAG,CACH,MAAM,IAAI,aAAa,MAAM,CAAC,cAAc,EAAE,eAAe,OAAO,gBAAgB,QAAQ,EAAE,CAC/F,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,CAAC;gBACvD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC;gBAEhD,qBAAqB;gBACrB,YAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAEpE,4BAA4B;gBAC5B,MAAM,YAAY,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;gBACxD,MAAM,OAAO,GAAkB;oBAC7B,QAAQ;oBACR,QAAQ;oBACR,UAAU;oBACV,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;oBACtC,SAAS,EAAE,IAAI;iBAChB,CAAC;gBAEF,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;oBAC5B,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtC,CAAC;qBAAM,IAAI,YAAY,KAAK,aAAa,IAAI,WAAW,EAAE,CAAC;oBACzD,KAAK,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACpC,CAAC;qBAAM,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;oBAClC,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACN,sEAAsE;oBACtE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAChB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;oBAC3E,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,UAAU,GAAG,CAAC,CAAC;oBAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;oBACvC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,0BAA0B;AAC1B,8EAA8E;AAE9E;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,aAAqB;IACtD,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IAEpE,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO;IAEnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oBAAoB,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,mCAAmC,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,uCAAuC,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,sCAAsC,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,gDAAgD,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,+CAA+C,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,qDAAqD,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,uDAAuD,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,aAAa,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,kDAAkD;AAClD,SAAS,iBAAiB;IACxB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,+CAA+C,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CACT,UAAU,CAAC,CAAC,GAAG,CAAC,4DAA4D,SAAS,gBAAgB,CAAC,EAAE,CACzG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,6CAA6C,CAAC,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,eAAe,SAAS,eAAe,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CACT,UAAU,CAAC,CAAC,GAAG,CAAC,yFAAyF,CAAC,EAAE,CAC7G,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,+DAA+D,CACjG,CAAC;IACF,OAAO,CAAC,GAAG,CACT,+BAA+B,CAAC,CAAC,GAAG,CAAC,+CAA+C,CAAC,EAAE,CACxF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CACT,UAAU,CAAC,CAAC,GAAG,CAAC,4DAA4D,SAAS,gBAAgB,CAAC,EAAE,CACzG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,qEAAqE,CACvG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,6CAA6C,CAAC,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,qDAAqD,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,mFAAmF,CAAC,EAAE,CAClG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,gDAAgD;AAChD,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,IAAI,GAAG,IAAa,CAAC;IAC3B,MAAM,CAAC,GAAG,CAAC,EAAU,EAAE,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAE5D,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAA0C;QAC3E,KAAK,EAAE,CAAC,CAAC,oBAAoB,EAAE,oCAAoC,CAAC;QACpE,IAAI;QACJ,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,QAAiB;gBACxB,KAAK,EAAE,CAAC,CAAC,+BAA+B,EAAE,mCAAmC,CAAC;aAC/E;YACD;gBACE,KAAK,EAAE,QAAiB;gBACxB,KAAK,EAAE,CAAC,CAAC,4BAA4B,EAAE,iCAAiC,CAAC;aAC1E;YACD,EAAE,KAAK,EAAE,QAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE;YAClE,EAAE,KAAK,EAAE,MAAe,EAAE,KAAK,EAAE,CAAC,CAAC,cAAc,EAAE,0BAA0B,CAAC,EAAE;SACjF;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,0DAA0D,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,wDAAwD,CAAC,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAElB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,4CAA4C,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,8EAA8E,CAAC,EAAE,CAC7F,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,WAAW,GAAG,MAAM,YAAY,CAAS;YAC7C,KAAK,EAAE,CAAC,CAAC,cAAc,EAAE,0BAA0B,CAAC;YACpD,IAAI;YACJ,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,6BAA6B,EAAE,0BAA0B,CAAC,EAAE;gBAC1F;oBACE,KAAK,EAAE,UAAU;oBACjB,KAAK,EAAE,CAAC,CAAC,+BAA+B,EAAE,gCAAgC,CAAC;iBAC5E;gBACD,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE;gBAC1D,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,cAAc,EAAE,0BAA0B,CAAC,EAAE;aAC1E;SACF,CAAC,CAAC;QAEH,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;gBAC9B,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,0BAA0B,CAAC;gBAClD,WAAW,EAAE,UAAU;gBACvB,IAAI;aACL,CAAC,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,UAAU,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,WAAW,IAAI,UAAU,CAAC;QACpC,CAAC;QAED,QAAQ,GAAG,wBAAwB,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,mBAAmB;QACnB,MAAM,OAAO,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC/E,MAAM,SAAS,GACb,QAAQ,KAAK,QAAQ;YACnB,CAAC,CAAC,gCAAgC;YAClC,CAAC,CAAC,sCAAsC,CAAC;QAE7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,2BAA2B,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC;YAChC,KAAK,EAAE,CAAC,CAAC,YAAY,OAAO,GAAG,EAAE,YAAY,OAAO,GAAG,CAAC;YACxD,WAAW,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;YAC5D,SAAS,EAAE,IAAI;YACf,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,oCAAoC,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzB,KAAK,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,aAAa,CAAC;IAC7E,CAAC;IAED,cAAc;IACd,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,4CAA4C;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,IAAI,YAAY,GAA4B,EAAE,CAAC;IAC/C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YACjD,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAA2B,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7D,IAAI,MAAM;QAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IACxC,IAAI,QAAQ;QAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;IAE9C,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IAC9B,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAExE,uCAAuC;IACvC,IAAI,MAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,mBAAmB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,uCAAuC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,eAAe,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,0CAA0C,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,qCAAqC;AACrC,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAE3B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,+BAA+B,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,0CAA0C,CAAC,CAAC;QACzE,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,0BAA0B,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,IAAI,oBAAoB,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,kCAAkC;AAClC,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAiB;QAC1B;YACE,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1D,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,UAAoB;SAC5D;QACD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;KAC7C,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,MAAM,CAAC,gBAAgB;gBAC5B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,MAAM,CAAC,aAAa,EAAE,CAAC;gBACzD,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;SACtB,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;YACxE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,SAAmB;SACrE,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,0CAA0C;AAC1C,KAAK,UAAU,cAAc,CAAC,OAAe;IAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,EAAE,CAAC,IAAI,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IAED,6CAA6C;IAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAmB,CAAC;IAE5E,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;QACnC,OAAO,EAAE;YACP,EAAE,EAAE,yCAAyC;YAC7C,OAAO,EAAE,uBAAuB;SACjC;QACD,YAAY,EAAE,IAAI;QAClB,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG;QACd,GAAG,MAAM;QACT,wBAAwB,EAAE,QAAQ;QAClC,mBAAmB,EAAE,QAAQ;YAC3B,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,IAAI,4BAA4B,CAAC;YAC9D,CAAC,CAAC,MAAM,CAAC,mBAAmB;KAC/B,CAAC;IACF,IAAI,CAAC;QACH,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,qCAAqC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,IAAI,0BAA0B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,4BAA4B,CAAC,EAAE,CACjH,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,wCAAwC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,GAAG,CACH,wFAAwF,CACzF,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,KAAK,UAAU,gBAAgB;IAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,EAAE,CAAC,IAAI,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,IAAI,2BAA2B,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,kCAAkC;AAClC,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAEjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAG;QACf,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,2CAA2C,EAAE;QAClE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE;QAChD,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE;QAC9C,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,EAAE;QAC7C,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,8BAA8B,EAAE;QACzD,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,2BAA2B,EAAE;QACrD,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,uBAAuB,EAAE;QACnD,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,4BAA4B,EAAE;QACrD,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE;KACxC,CAAC;IAEF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,CACtG,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAC5F,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,mCAAmC,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,sCAAsC,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,qCAAqC,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CACpG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,uCAAuC,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,iCAAiC,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,WAAW,EAAE,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,kDAAkD;AAClD,SAAS,aAAa,CAAC,IAAc,EAAE,MAAc;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,IAAI,YAAY,MAAM,2BAA2B,CAAC,CAAC;gBAC9E,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACf,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAEzD,IAAI,WAAW,EAAE,CAAC;IAChB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1C,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EACL,CAAC,EACD,MAAM,EACN,MAAM,EACN,OAAO,EACP,OAAO,EACP,WAAW,EACX,OAAO,EACP,WAAW,EACX,aAAa,EACb,YAAY,EACZ,UAAU,GACX,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,oBAAoB,CAAwB,CAAC;AACnE,2BAA2B;AAC3B,MAAM,CAAC,MAAM,WAAW,GAAW,IAAI,CAAC,OAAO,CAAC;AAEhD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAClC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,gBAAgB,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAE3D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,MAAM,YAAY,CAChB,OAAO,EACP,OAAO,EACP,UAAU,EACV,WAAW,EACX,cAAc,EACd,SAAS,EACT,WAAW,CACZ,CAAC;YACF,MAAM;QACR,KAAK,MAAM;YACT,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM;QACR,KAAK,QAAQ;YACX,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM;QACR,KAAK,SAAS;YACZ,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;YAC9B,MAAM;QACR,KAAK,WAAW;YACd,MAAM,gBAAgB,EAAE,CAAC;YACzB,MAAM;QACR,KAAK,QAAQ;YACX,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM;QACR,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAkC,CAAC;YACjE,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvF,MAAM;QACR,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpB,MAAM;QACR,CAAC;QACD,KAAK,UAAU;YACb,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;YAC9B,MAAM;QACR,KAAK,MAAM;YACT,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM;QACR,KAAK,MAAM,CAAC;QACZ;YACE,SAAS,EAAE,CAAC;YACZ,MAAM;IACV,CAAC;AACH,CAAC;AAED,sCAAsC;AACtC,KAAK,UAAU,YAAY,CACzB,OAAe,EACf,OAAO,GAAG,KAAK,EACf,UAAmB,EACnB,WAAW,GAAG,KAAK,EACnB,cAAc,GAAG,KAAK,EACtB,aAAa,GAAG,KAAK,EACrB,eAAe,GAAG,KAAK;IAEvB,oDAAoD;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAED,2EAA2E;IAC3E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,mCAAmC,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IAExD,4DAA4D;IAC5D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,wBAAwB,GAAG,KAAK,CAAC;QACxC,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAClC,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,iCAAiC,CAAC,CAAC;QAClE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAE7C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAEpC,cAAc;IACd,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC;IAEzC,4EAA4E;IAC5E,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACxC,wCAAwC;QACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,WAAW,CAAC,0BAA0B,EAAE;YACtC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;YAC/D,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE;YACpD,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YAC7C,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;YAC/C,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAC5C,GAAG,CAAC,MAAM,CAAC,gBAAgB;gBACzB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,oBAAoB,MAAM,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;gBAC1F,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,mBAAmB;gBAC5B,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACvE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACH,CAAC;QAEF,mDAAmD;QACnD,IAAI,MAAM,CAAC,wBAAwB,KAAK,KAAK,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;YACnF,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,iCAAiC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACnF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,qDAAqD,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,iCAAiC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACnF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,sEAAsE,CAAC,EAAE,CACrF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gDAAgD,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,yBAAyB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,0CAA0C;QAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,uDAAuD,CAAC,CAAC;QAE1F,yDAAyD;QACzD,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,EAAE,QAAQ,KAAK,QAAQ,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,EAAE,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,EAAE,QAAQ,KAAK,QAAQ,CAAC;QACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,OAAO,CACvB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAC9B,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,SAAS,CAAC,CAAC,EAAE,CACnH,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,QAAQ,GACZ,MAAM,CAAC,EAAE,EAAE,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACrF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,IAAI,uBAAuB,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,UAAU,CACxF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,iBAAiB,EAAE,CAAC;QACtB,CAAC;IACH,CAAC,CAAC,yCAAyC;IAE3C,+DAA+D;IAC/D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACzC,MAAM,mBAAmB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,gBAAgB,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,uEAAuE;IACvE,MAAM,iBAAiB,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7E,sEAAsE;IACtE,MAAM,WAAW,GAAG,MAAM,CAAC,mBAAmB,IAAI,wBAAwB,CAAC;IAC3E,MAAM,cAAc,GAMf,EAAE,CAAC;IACR,IAAI,mBAAmB,GAAyC,IAAI,CAAC;IACrE,IAAI,yBAAyB,GAAyC,IAAI,CAAC;IAC3E,MAAM,oBAAoB,GAAa,EAAE,CAAC;IAE1C,SAAS,mBAAmB;QAC1B,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACxC,MAAM,KAAK,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;QAClC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,KAAK,KAAK,CAAC,GAAG,WAAW,gBAAgB,EAAE;oBACzC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC9D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBACZ,iBAAiB;gBACnB,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,sBAAsB;QAC7B,IAAI,mBAAmB;YAAE,OAAO;QAChC,mBAAmB,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,mBAAmB,GAAG,IAAI,CAAC;YAC3B,mBAAmB,EAAE,CAAC;QACxB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB;IAChC,CAAC;IAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,YAAoB,EAAE,QAAgB;QAC/E,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK;YAAE,OAAO;QAC9C,cAAc,CAAC,IAAI,CAAC;YAClB,KAAK;YACL,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;YAC/C,UAAU,EAAE,CAAC,EAAE,0CAA0C;YACzD,YAAY;YACZ,QAAQ;SACT,CAAC,CAAC;QACH,sBAAsB,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,OAAe;QACtD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO;QAC1C,oBAAoB,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC;QAClD,IAAI,yBAAyB;YAAE,YAAY,CAAC,yBAAyB,CAAC,CAAC;QACvE,yBAAyB,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1C,yBAAyB,GAAG,IAAI,CAAC;YACjC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACzE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,sBAAsB,CAAC;YACpF,KAAK,MAAM,CAAC,oBAAoB,CAAC;iBAC9B,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACrB,IAAI,CAAC;oBACH,QAAQ,CACN,uCAAuC,QAAQ,IAAI,EAAE,0BAA0B,EAC/E,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,qCAAqC;gBACvC,CAAC;YACH,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrB,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,cAAc;IAC3B,CAAC;IAED,wEAAwE;IACxE,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC;QACpC,YAAY,EAAE,MAAM;QACpB,YAAY,EAAE,MAAM,CAAC,uBAAuB,EAAE;QAC9C,iBAAiB,EAAE,MAAM,CAAC,uBAAuB,EAAE;KACpD,CAAC,CAAC;IAEH,YAAY,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,MAA4C,EAAE,EAAE;QAC9E,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,iBAAiB,EAAE,CAAC;YACtB,iBAAiB,CAAC,SAAS,CAAC;gBAC1B,IAAI;gBACJ,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,kBAAkB,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,UAAU,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,UAAU,EAAE,CACrG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAA4C,EAAE,EAAE;QAChF,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,iBAAiB,EAAE,CAAC;YACtB,iBAAiB,CAAC,SAAS,CAAC;gBAC1B,IAAI;gBACJ,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,kBAAkB,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,UAAU,EAAE;aACnE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,mBAAmB,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,UAAU,EAAE,CAClG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,EAAE,CACb,sBAAsB,EACtB,CAAC,MAAwF,EAAE,EAAE;QAC3F,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,IAAI,GACR,MAAM,CAAC,SAAS,KAAK,KAAK;YACxB,CAAC,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ;gBAC7B,CAAC,CAAC,OAAO,CAAC,IAAI;gBACd,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACrB,MAAM,SAAS,GACb,MAAM,CAAC,SAAS,KAAK,KAAK;YACxB,CAAC,CAAC,CAAC,CAAC,IAAI;YACR,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ;gBAC7B,CAAC,CAAC,CAAC,CAAC,OAAO;gBACX,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAEnB,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe;gBACtC,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,iBAAiB,CAAC,SAAS,CAAC;gBAC1B,IAAI;gBACJ,IAAI;gBACJ,OAAO,EAAE,gBAAgB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE;aACjF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CACT,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,SAAS,OAAO,CACpH,CAAC;YACF,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,mBAAmB,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,kBAAkB,CAAC,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACnE,gBAAgB,CACd,aAAa,EACb,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,OAAO,CAChE,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC;IAE1B,sEAAsE;IACtE,MAAM,YAAY,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACxD,YAAY,CAAC,KAAK,EAAE,CAAC;IAErB,uEAAuE;IACvE,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1E,yEAAyE;IACzE,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IAClC,MAAM,gBAAgB,GAAG,KAAK,IAAI,EAAE;QAClC,IAAI,mBAAmB;YAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC;QAC3D,mBAAmB,EAAE,CAAC;QACtB,IAAI,yBAAyB;YAAE,YAAY,CAAC,yBAAyB,CAAC,CAAC;QACvE,YAAY,CAAC,IAAI,EAAE,CAAC;QACpB,YAAY,CAAC,IAAI,EAAE,CAAC;QACpB,IAAI,iBAAiB;YAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,gBAAgB,EAAE,CAAC;IAC3B,CAAC,CAAC;IACF,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,gBAAgB,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,gBAAgB,EAAE,CAAC,CAAC;IAErD,uEAAuE;IACvE,IAAI,iBAAiB,EAAE,CAAC;QACtB,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,GAAmB,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,OAAO;oBACpB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;wBAC1B,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,WAAW;oBACf,CAAC,CAAC,SAAS;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,UAAU,EAAE,KAAK;gBACjB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,CAAC;gBAChD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC;gBACxC,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ;gBAC/B,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK;gBACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;aAC1C,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,iBAAiB,CAAC,UAAU,CAAC;oBAC3B,IAAI;oBACJ,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;oBAC/C,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;oBAC7C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;oBAC3C,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;iBACzC,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,iBAAiB,CAAC,SAAS,CAAC;oBAC1B,IAAI;oBACJ,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,cAAc,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,SAAS;iBACtF,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;SAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACpB,+EAA+E;QAC/E,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACrC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,IAAI,GAAG,GAAG,cAAc,GAAG,MAAM;oBAAE,OAAO;gBAC1C,cAAc,GAAG,GAAG,CAAC;gBACrB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBAE/C,qBAAqB;gBACrB,YAAY,CAAC,WAAW,EAAE,CAAC;gBAE3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;oBACzC,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,GAAG,CACH,MAAM,IAAI,aAAa,MAAM,CAAC,cAAc,EAAE,eAAe,OAAO,gBAAgB,QAAQ,EAAE,CAC/F,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,CAAC;gBACvD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC;gBAEhD,qBAAqB;gBACrB,YAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAEpE,4BAA4B;gBAC5B,MAAM,YAAY,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;gBACxD,MAAM,OAAO,GAAkB;oBAC7B,QAAQ;oBACR,QAAQ;oBACR,UAAU;oBACV,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;oBACtC,SAAS,EAAE,IAAI;iBAChB,CAAC;gBAEF,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;oBAC5B,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtC,CAAC;qBAAM,IAAI,YAAY,KAAK,aAAa,IAAI,WAAW,EAAE,CAAC;oBACzD,KAAK,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACpC,CAAC;qBAAM,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;oBAClC,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACN,sEAAsE;oBACtE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAChB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;oBAC3E,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,UAAU,GAAG,CAAC,CAAC;oBAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;oBACvC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,0BAA0B;AAC1B,8EAA8E;AAE9E;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,aAAqB;IACtD,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IAEpE,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO;IAEnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oBAAoB,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,mCAAmC,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,uCAAuC,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,sCAAsC,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,gDAAgD,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,+CAA+C,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,qDAAqD,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,uDAAuD,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,aAAa,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,oFAAoF;AACpF,SAAS,iBAAiB;IACxB,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAAE,OAAO;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,+CAA+C,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CACT,UAAU,CAAC,CAAC,GAAG,CAAC,4DAA4D,SAAS,gBAAgB,CAAC,EAAE,CACzG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,6CAA6C,CAAC,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,eAAe,SAAS,eAAe,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CACT,UAAU,CAAC,CAAC,GAAG,CAAC,yFAAyF,CAAC,EAAE,CAC7G,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,+DAA+D,CACjG,CAAC;IACF,OAAO,CAAC,GAAG,CACT,+BAA+B,CAAC,CAAC,GAAG,CAAC,+CAA+C,CAAC,EAAE,CACxF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CACT,UAAU,CAAC,CAAC,GAAG,CAAC,4DAA4D,SAAS,gBAAgB,CAAC,EAAE,CACzG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,qEAAqE,CACvG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,6CAA6C,CAAC,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,qDAAqD,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,mFAAmF,CAAC,EAAE,CAClG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,gDAAgD;AAChD,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,IAAI,GAAG,IAAa,CAAC;IAC3B,MAAM,CAAC,GAAG,CAAC,EAAU,EAAE,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAE5D,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAA0C;QAC3E,KAAK,EAAE,CAAC,CAAC,oBAAoB,EAAE,oCAAoC,CAAC;QACpE,IAAI;QACJ,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,QAAiB;gBACxB,KAAK,EAAE,CAAC,CAAC,+BAA+B,EAAE,mCAAmC,CAAC;aAC/E;YACD;gBACE,KAAK,EAAE,QAAiB;gBACxB,KAAK,EAAE,CAAC,CAAC,4BAA4B,EAAE,iCAAiC,CAAC;aAC1E;YACD,EAAE,KAAK,EAAE,QAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE;YAClE,EAAE,KAAK,EAAE,MAAe,EAAE,KAAK,EAAE,CAAC,CAAC,cAAc,EAAE,0BAA0B,CAAC,EAAE;SACjF;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,0DAA0D,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,wDAAwD,CAAC,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAElB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,4CAA4C,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,8EAA8E,CAAC,EAAE,CAC7F,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,WAAW,GAAG,MAAM,YAAY,CAAS;YAC7C,KAAK,EAAE,CAAC,CAAC,cAAc,EAAE,0BAA0B,CAAC;YACpD,IAAI;YACJ,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,6BAA6B,EAAE,0BAA0B,CAAC,EAAE;gBAC1F;oBACE,KAAK,EAAE,UAAU;oBACjB,KAAK,EAAE,CAAC,CAAC,+BAA+B,EAAE,gCAAgC,CAAC;iBAC5E;gBACD,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE;gBAC1D,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,cAAc,EAAE,0BAA0B,CAAC,EAAE;aAC1E;SACF,CAAC,CAAC;QAEH,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;gBAC9B,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,0BAA0B,CAAC;gBAClD,WAAW,EAAE,UAAU;gBACvB,IAAI;aACL,CAAC,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,UAAU,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,WAAW,IAAI,UAAU,CAAC;QACpC,CAAC;QAED,QAAQ,GAAG,wBAAwB,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,mBAAmB;QACnB,MAAM,OAAO,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC/E,MAAM,SAAS,GACb,QAAQ,KAAK,QAAQ;YACnB,CAAC,CAAC,gCAAgC;YAClC,CAAC,CAAC,sCAAsC,CAAC;QAE7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,2BAA2B,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC;YAChC,KAAK,EAAE,CAAC,CAAC,YAAY,OAAO,GAAG,EAAE,YAAY,OAAO,GAAG,CAAC;YACxD,WAAW,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;YAC5D,SAAS,EAAE,IAAI;YACf,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,oCAAoC,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzB,KAAK,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,aAAa,CAAC;IAC7E,CAAC;IAED,cAAc;IACd,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,4CAA4C;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,IAAI,YAAY,GAA4B,EAAE,CAAC;IAC/C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YACjD,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAA2B,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7D,IAAI,MAAM;QAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IACxC,IAAI,QAAQ;QAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;IAE9C,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IAC9B,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAExE,uCAAuC;IACvC,IAAI,MAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,mBAAmB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,uCAAuC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,eAAe,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,0CAA0C,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,qCAAqC;AACrC,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAE3B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,+BAA+B,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,0CAA0C,CAAC,CAAC;QACzE,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,0BAA0B,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,IAAI,oBAAoB,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,kCAAkC;AAClC,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAiB;QAC1B;YACE,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1D,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,UAAoB;SAC5D;QACD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;KAC7C,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,MAAM,CAAC,gBAAgB;gBAC5B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,MAAM,CAAC,aAAa,EAAE,CAAC;gBACzD,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;SACtB,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;YACxE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,SAAmB;SACrE,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,0CAA0C;AAC1C,KAAK,UAAU,cAAc,CAAC,OAAe;IAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,EAAE,CAAC,IAAI,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IAED,6CAA6C;IAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAmB,CAAC;IAE5E,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;QACnC,OAAO,EAAE;YACP,EAAE,EAAE,yCAAyC;YAC7C,OAAO,EAAE,uBAAuB;SACjC;QACD,YAAY,EAAE,IAAI;QAClB,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG;QACd,GAAG,MAAM;QACT,wBAAwB,EAAE,QAAQ;QAClC,mBAAmB,EAAE,QAAQ;YAC3B,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,IAAI,4BAA4B,CAAC;YAC9D,CAAC,CAAC,MAAM,CAAC,mBAAmB;KAC/B,CAAC;IACF,IAAI,CAAC;QACH,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,qCAAqC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,IAAI,0BAA0B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,4BAA4B,CAAC,EAAE,CACjH,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,wCAAwC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,GAAG,CACH,wFAAwF,CACzF,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,KAAK,UAAU,gBAAgB;IAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,EAAE,CAAC,IAAI,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,IAAI,2BAA2B,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,kCAAkC;AAClC,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAEjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAG;QACf,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,2CAA2C,EAAE;QAClE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE;QAChD,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE;QAC9C,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,EAAE;QAC7C,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,8BAA8B,EAAE;QACzD,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,2BAA2B,EAAE;QACrD,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,uBAAuB,EAAE;QACnD,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,4BAA4B,EAAE;QACrD,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE;KACxC,CAAC;IAEF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,CACtG,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAC5F,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,mCAAmC,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,sCAAsC,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,qCAAqC,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CACpG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,uCAAuC,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,iCAAiC,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,WAAW,EAAE,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,kDAAkD;AAClD,SAAS,aAAa,CAAC,IAAc,EAAE,MAAc;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,IAAI,YAAY,MAAM,2BAA2B,CAAC,CAAC;gBAC9E,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACf,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAEzD,IAAI,WAAW,EAAE,CAAC;IAChB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1C,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
package/dist/config.js CHANGED
@@ -78,8 +78,8 @@ const GuardConfigFileSchema = z
78
78
  export const DEFAULT_DATA_DIR = join(homedir(), '.panguard-guard');
79
79
  /** Default configuration / 預設配置 */
80
80
  export const DEFAULT_GUARD_CONFIG = {
81
- lang: 'zh-TW',
82
- mode: 'learning',
81
+ lang: 'en',
82
+ mode: 'protection',
83
83
  learningDays: 7,
84
84
  actionPolicy: DEFAULT_ACTION_POLICY,
85
85
  notifications: {},
@@ -1 +1 @@
1
- {"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,MAAM,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;AAErD;;;GAGG;AACH,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,YAAY,EAAE,CAAC;SACZ,MAAM,CAAC;QACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACpC,CAAC;SACD,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC5D,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAClC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACtC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACtC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACnC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC1D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC1D,YAAY,EAAE,CAAC;aACZ,MAAM,CAAC;YACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YACpB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;SAC1D,CAAC;aACD,QAAQ,EAAE;KACd,CAAC;SACD,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACvD,EAAE,EAAE,CAAC;SACF,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC;YACf,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,SAAS;YACT,UAAU;YACV,UAAU;SACX,CAAC;QACF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;SACD,QAAQ,EAAE;IACb,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChD,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,sCAAsC;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAEnE,mCAAmC;AACnC,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAC/C,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,UAAU;IAChB,YAAY,EAAE,CAAC;IACf,YAAY,EAAE,qBAAqB;IACnC,aAAa,EAAE,EAAE;IACjB,OAAO,EAAE,gBAAgB;IACzB,aAAa,EAAE,IAAI;IACnB,gBAAgB,EAAE,IAAI;IACtB,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE;QACR,UAAU,EAAE,IAAI;QAChB,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,IAAI;QACjB,mBAAmB,EAAE,KAAK;QAC1B,mBAAmB,EAAE,KAAK;KAC3B;IACD,eAAe,EAAE,IAAI;IACrB,gBAAgB,EAAE,KAAK;IACvB,mBAAmB,EAAE,wBAAwB;CAC9C,CAAC;AAEF,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AACvD,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;AAElE;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,MAAM,SAAS,GAAG,UAAU,IAAI,IAAI,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAEtE,kCAAkC;IAClC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,kDAAkD;IAClD,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CACT,sBAAsB,SAAS,iCAAiC;YAC9D,gBAAgB,CACnB,CAAC;QACF,OAAO,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACnE,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAE5D,yCAAyC;QACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM;iBACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;YACrD,4DAA4D;QAC9D,CAAC;QAED,MAAM,MAAM,GAAG,QAEd,CAAC;QACF,iEAAiE;QACjE,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAgB;YAC1B,GAAG,oBAAoB;YACvB,GAAG,MAAM;YACT,YAAY,EAAE,EAAE,GAAG,qBAAqB,EAAE,GAAG,YAAY,EAAE;YAC3D,aAAa,EAAE,EAAE,GAAG,oBAAoB,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE;YACzF,QAAQ,EAAE,EAAE,GAAG,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;SAC3E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,SAAS,IAAI,OAAO,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,cAAc,GAAG,EAAE,CAAC,CAAC;QAC/D,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAE1D,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAC;QACjE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC3D,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAA4B,CAAC;QACjF,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC/D,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAA4B,CAAC;QACtE,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAA2B,CAAC;QAEvE,qEAAqE;QACrE,MAAM,WAAW,GAAG,uBAAuB,CACzC,aAAa,CAAC,SAAS,CAAuB,EAC9C,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAC1D,CAAC;QAEF,MAAM,MAAM,GAAgB;YAC1B,GAAG,oBAAoB;YACvB,IAAI,EAAG,IAAI,CAAC,UAAU,CAAyB,IAAI,oBAAoB,CAAC,IAAI;YAC5E,IAAI,EAAG,KAAK,CAAC,MAAM,CAAyB,IAAI,oBAAoB,CAAC,IAAI;YACzE,YAAY,EAAG,KAAK,CAAC,cAAc,CAAY,IAAI,oBAAoB,CAAC,YAAY;YACpF,YAAY,EAAE;gBACZ,GAAG,qBAAqB;gBACxB,GAAG,MAAM;aACV;YACD,aAAa,EAAE,WAAW;YAC1B,QAAQ,EAAE;gBACR,GAAG,oBAAoB,CAAC,QAAQ;gBAChC,GAAG,QAAQ;aACZ;SACF,CAAC;QAEF,qDAAqD;QACrD,MAAM,KAAK,GAAI,MAAM,CAAC,mBAAmB,CAAwB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC/F,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC;QACnC,CAAC;QAED,kBAAkB;QAClB,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YACnB,MAAM,CAAC,EAAE,GAAG;gBACV,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAmC;gBAC1D,KAAK,EAAG,EAAE,CAAC,OAAO,CAAY,IAAI,SAAS;gBAC3C,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAuB;gBAC9C,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAuB;aAC3C,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,CACT,2CAA2C,UAAU,KAAK;YACxD,MAAM,UAAU,WAAW,CAC9B,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,eAAe,GAAG,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,OAA2B,EAC3B,GAA2B;IAE3B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IAE9C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;gBACrC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACpE,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,OAAO;YACV,OAAO,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,KAAK,OAAO;YACV,OAAO,GAAG,CAAC,MAAM,CAAC;gBAChB,CAAC,CAAC;oBACE,KAAK,EAAE;wBACL,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;wBACjB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;wBAChC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM;wBAChC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;wBAC1D,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;wBACvB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;qBACjD;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,MAAmB,EAAE,UAAmB;IACjE,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,aAAa,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,2BAA2B,OAAO,eAAe,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,MAAM,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;AAErD;;;GAGG;AACH,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,YAAY,EAAE,CAAC;SACZ,MAAM,CAAC;QACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACpC,CAAC;SACD,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC5D,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAClC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACtC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACtC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACnC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC1D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC1D,YAAY,EAAE,CAAC;aACZ,MAAM,CAAC;YACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YACpB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;SAC1D,CAAC;aACD,QAAQ,EAAE;KACd,CAAC;SACD,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACvD,EAAE,EAAE,CAAC;SACF,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC;YACf,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,SAAS;YACT,UAAU;YACV,UAAU;SACX,CAAC;QACF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;SACD,QAAQ,EAAE;IACb,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChD,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,sCAAsC;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAEnE,mCAAmC;AACnC,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAC/C,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,YAAY;IAClB,YAAY,EAAE,CAAC;IACf,YAAY,EAAE,qBAAqB;IACnC,aAAa,EAAE,EAAE;IACjB,OAAO,EAAE,gBAAgB;IACzB,aAAa,EAAE,IAAI;IACnB,gBAAgB,EAAE,IAAI;IACtB,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE;QACR,UAAU,EAAE,IAAI;QAChB,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,IAAI;QACjB,mBAAmB,EAAE,KAAK;QAC1B,mBAAmB,EAAE,KAAK;KAC3B;IACD,eAAe,EAAE,IAAI;IACrB,gBAAgB,EAAE,KAAK;IACvB,mBAAmB,EAAE,wBAAwB;CAC9C,CAAC;AAEF,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AACvD,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;AAElE;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,MAAM,SAAS,GAAG,UAAU,IAAI,IAAI,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAEtE,kCAAkC;IAClC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,kDAAkD;IAClD,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CACT,sBAAsB,SAAS,iCAAiC;YAC9D,gBAAgB,CACnB,CAAC;QACF,OAAO,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACnE,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAE5D,yCAAyC;QACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM;iBACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;YACrD,4DAA4D;QAC9D,CAAC;QAED,MAAM,MAAM,GAAG,QAEd,CAAC;QACF,iEAAiE;QACjE,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAgB;YAC1B,GAAG,oBAAoB;YACvB,GAAG,MAAM;YACT,YAAY,EAAE,EAAE,GAAG,qBAAqB,EAAE,GAAG,YAAY,EAAE;YAC3D,aAAa,EAAE,EAAE,GAAG,oBAAoB,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE;YACzF,QAAQ,EAAE,EAAE,GAAG,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;SAC3E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,SAAS,IAAI,OAAO,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,cAAc,GAAG,EAAE,CAAC,CAAC;QAC/D,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAE1D,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAC;QACjE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC3D,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAA4B,CAAC;QACjF,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC/D,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAA4B,CAAC;QACtE,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAA2B,CAAC;QAEvE,qEAAqE;QACrE,MAAM,WAAW,GAAG,uBAAuB,CACzC,aAAa,CAAC,SAAS,CAAuB,EAC9C,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAC1D,CAAC;QAEF,MAAM,MAAM,GAAgB;YAC1B,GAAG,oBAAoB;YACvB,IAAI,EAAG,IAAI,CAAC,UAAU,CAAyB,IAAI,oBAAoB,CAAC,IAAI;YAC5E,IAAI,EAAG,KAAK,CAAC,MAAM,CAAyB,IAAI,oBAAoB,CAAC,IAAI;YACzE,YAAY,EAAG,KAAK,CAAC,cAAc,CAAY,IAAI,oBAAoB,CAAC,YAAY;YACpF,YAAY,EAAE;gBACZ,GAAG,qBAAqB;gBACxB,GAAG,MAAM;aACV;YACD,aAAa,EAAE,WAAW;YAC1B,QAAQ,EAAE;gBACR,GAAG,oBAAoB,CAAC,QAAQ;gBAChC,GAAG,QAAQ;aACZ;SACF,CAAC;QAEF,qDAAqD;QACrD,MAAM,KAAK,GAAI,MAAM,CAAC,mBAAmB,CAAwB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC/F,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC;QACnC,CAAC;QAED,kBAAkB;QAClB,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YACnB,MAAM,CAAC,EAAE,GAAG;gBACV,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAmC;gBAC1D,KAAK,EAAG,EAAE,CAAC,OAAO,CAAY,IAAI,SAAS;gBAC3C,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAuB;gBAC9C,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAuB;aAC3C,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,CACT,2CAA2C,UAAU,KAAK;YACxD,MAAM,UAAU,WAAW,CAC9B,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,eAAe,GAAG,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,OAA2B,EAC3B,GAA2B;IAE3B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IAE9C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;gBACrC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACpE,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,OAAO;YACV,OAAO,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,KAAK,OAAO;YACV,OAAO,GAAG,CAAC,MAAM,CAAC;gBAChB,CAAC,CAAC;oBACE,KAAK,EAAE;wBACL,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;wBACjB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;wBAChC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM;wBAChC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;wBAC1D,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;wBACvB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;qBACjD;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,MAAmB,EAAE,UAAmB;IACjE,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,aAAa,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,2BAA2B,OAAO,eAAe,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC"}