PyPI - contentctl - Versions diffs - 3.6.0__py3-none-any.whl → 4.0.2__py3-none-any.whl - Mend

contentctl 3.6.0py3-none-any.whl → 4.0.2py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (142) hide show

contentctl/actions/build.py +89 -0
contentctl/actions/detection_testing/DetectionTestingManager.py +48 -49
contentctl/actions/detection_testing/GitService.py +148 -230
contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructure.py +14 -24
contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureContainer.py +43 -17
contentctl/actions/detection_testing/views/DetectionTestingView.py +3 -2
contentctl/actions/detection_testing/views/DetectionTestingViewFile.py +0 -8
contentctl/actions/doc_gen.py +1 -1
contentctl/actions/initialize.py +28 -65
contentctl/actions/inspect.py +260 -0
contentctl/actions/new_content.py +106 -13
contentctl/actions/release_notes.py +168 -144
contentctl/actions/reporting.py +24 -13
contentctl/actions/test.py +39 -20
contentctl/actions/validate.py +25 -48
contentctl/contentctl.py +196 -754
contentctl/enrichments/attack_enrichment.py +69 -19
contentctl/enrichments/cve_enrichment.py +28 -13
contentctl/helper/link_validator.py +24 -26
contentctl/helper/utils.py +7 -3
contentctl/input/director.py +139 -201
contentctl/input/new_content_questions.py +63 -61
contentctl/input/sigma_converter.py +1 -2
contentctl/input/ssa_detection_builder.py +16 -7
contentctl/input/yml_reader.py +4 -3
contentctl/objects/abstract_security_content_objects/detection_abstract.py +487 -154
contentctl/objects/abstract_security_content_objects/security_content_object_abstract.py +155 -51
contentctl/objects/alert_action.py +40 -0
contentctl/objects/atomic.py +212 -0
contentctl/objects/baseline.py +44 -43
contentctl/objects/baseline_tags.py +69 -20
contentctl/objects/config.py +857 -125
contentctl/objects/constants.py +0 -1
contentctl/objects/correlation_search.py +1 -1
contentctl/objects/data_source.py +2 -4
contentctl/objects/deployment.py +61 -21
contentctl/objects/deployment_email.py +2 -2
contentctl/objects/deployment_notable.py +4 -4
contentctl/objects/deployment_phantom.py +2 -2
contentctl/objects/deployment_rba.py +3 -4
contentctl/objects/deployment_scheduling.py +2 -3
contentctl/objects/deployment_slack.py +2 -2
contentctl/objects/detection.py +1 -5
contentctl/objects/detection_tags.py +210 -119
contentctl/objects/enums.py +312 -24
contentctl/objects/integration_test.py +1 -1
contentctl/objects/integration_test_result.py +0 -2
contentctl/objects/investigation.py +62 -53
contentctl/objects/investigation_tags.py +30 -6
contentctl/objects/lookup.py +80 -31
contentctl/objects/macro.py +29 -45
contentctl/objects/mitre_attack_enrichment.py +29 -5
contentctl/objects/observable.py +3 -7
contentctl/objects/playbook.py +60 -30
contentctl/objects/playbook_tags.py +45 -8
contentctl/objects/security_content_object.py +1 -5
contentctl/objects/ssa_detection.py +8 -4
contentctl/objects/ssa_detection_tags.py +19 -26
contentctl/objects/story.py +142 -44
contentctl/objects/story_tags.py +46 -33
contentctl/objects/unit_test.py +7 -2
contentctl/objects/unit_test_attack_data.py +10 -19
contentctl/objects/unit_test_baseline.py +1 -1
contentctl/objects/unit_test_old.py +4 -3
contentctl/objects/unit_test_result.py +5 -3
contentctl/objects/unit_test_ssa.py +31 -0
contentctl/output/api_json_output.py +202 -130
contentctl/output/attack_nav_output.py +20 -9
contentctl/output/attack_nav_writer.py +3 -3
contentctl/output/ba_yml_output.py +3 -3
contentctl/output/conf_output.py +125 -391
contentctl/output/conf_writer.py +169 -31
contentctl/output/jinja_writer.py +2 -2
contentctl/output/json_writer.py +17 -5
contentctl/output/new_content_yml_output.py +8 -7
contentctl/output/svg_output.py +17 -27
contentctl/output/templates/analyticstories_detections.j2 +8 -4
contentctl/output/templates/analyticstories_investigations.j2 +1 -1
contentctl/output/templates/analyticstories_stories.j2 +6 -6
contentctl/output/templates/app.conf.j2 +2 -2
contentctl/output/templates/app.manifest.j2 +2 -2
contentctl/output/templates/detection_coverage.j2 +6 -8
contentctl/output/templates/doc_detection_page.j2 +2 -2
contentctl/output/templates/doc_detections.j2 +2 -2
contentctl/output/templates/doc_stories.j2 +1 -1
contentctl/output/templates/es_investigations_investigations.j2 +1 -1
contentctl/output/templates/es_investigations_stories.j2 +1 -1
contentctl/output/templates/header.j2 +2 -1
contentctl/output/templates/macros.j2 +6 -10
contentctl/output/templates/savedsearches_baselines.j2 +5 -5
contentctl/output/templates/savedsearches_detections.j2 +36 -33
contentctl/output/templates/savedsearches_investigations.j2 +4 -4
contentctl/output/templates/transforms.j2 +4 -4
contentctl/output/yml_writer.py +2 -2
contentctl/templates/app_template/README.md +7 -0
contentctl/{output/templates/splunk_app → templates/app_template}/default/data/ui/nav/default.xml +1 -0
contentctl/templates/app_template/lookups/mitre_enrichment.csv +638 -0
contentctl/templates/deployments/{00_default_anomaly.yml → escu_default_configuration_anomaly.yml} +1 -2
contentctl/templates/deployments/{00_default_baseline.yml → escu_default_configuration_baseline.yml} +1 -2
contentctl/templates/deployments/{00_default_correlation.yml → escu_default_configuration_correlation.yml} +2 -2
contentctl/templates/deployments/{00_default_hunting.yml → escu_default_configuration_hunting.yml} +2 -2
contentctl/templates/deployments/{00_default_ttp.yml → escu_default_configuration_ttp.yml} +1 -2
contentctl/templates/detections/anomalous_usage_of_7zip.yml +0 -1
contentctl/templates/stories/cobalt_strike.yml +0 -1
{contentctl-3.6.0.dist-info → contentctl-4.0.2.dist-info}/METADATA +36 -15
contentctl-4.0.2.dist-info/RECORD +168 -0
contentctl/actions/detection_testing/DataManipulation.py +0 -149
contentctl/actions/generate.py +0 -91
contentctl/helper/config_handler.py +0 -75
contentctl/input/baseline_builder.py +0 -66
contentctl/input/basic_builder.py +0 -58
contentctl/input/detection_builder.py +0 -370
contentctl/input/investigation_builder.py +0 -42
contentctl/input/new_content_generator.py +0 -95
contentctl/input/playbook_builder.py +0 -68
contentctl/input/story_builder.py +0 -106
contentctl/objects/app.py +0 -214
contentctl/objects/repo_config.py +0 -163
contentctl/objects/test_config.py +0 -630
contentctl/output/templates/macros_detections.j2 +0 -7
contentctl/output/templates/splunk_app/README.md +0 -7
contentctl-3.6.0.dist-info/RECORD +0 -176
/contentctl/{output/templates/splunk_app → templates/app_template}/README/essoc_story_detail.txt +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/README/essoc_summary.txt +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/README/essoc_usage_dashboard.txt +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/default/analytic_stories.conf +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/default/app.conf +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/default/commands.conf +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/default/content-version.conf +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/default/data/ui/views/escu_summary.xml +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/default/data/ui/views/feedback.xml +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/default/distsearch.conf +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/default/usage_searches.conf +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/default/use_case_library.conf +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/metadata/default.meta +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/static/appIcon.png +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/static/appIconAlt.png +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/static/appIconAlt_2x.png +0 -0
/contentctl/{output/templates/splunk_app → templates/app_template}/static/appIcon_2x.png +0 -0
{contentctl-3.6.0.dist-info → contentctl-4.0.2.dist-info}/LICENSE.md +0 -0
{contentctl-3.6.0.dist-info → contentctl-4.0.2.dist-info}/WHEEL +0 -0
{contentctl-3.6.0.dist-info → contentctl-4.0.2.dist-info}/entry_points.txt +0 -0

contentctl-3.6.0.dist-info/RECORD DELETED Viewed

@@ -1,176 +0,0 @@
-contentctl/__init__.py,sha256=IMjkMO3twhQzluVTo8Z6rE7Eg-9U79_LGKMcsWLKBkY,22
-contentctl/actions/acs_deploy.py,sha256=mf3uk495H1EU_LNN-TiOsYCo18HMGoEBMb6ojeTr0zw,1418
-contentctl/actions/apav_deploy.py,sha256=vjq-24zCLRvNyS0FSLyE4L2b4etG-qo4OM6Z9P0NYK4,2999
-contentctl/actions/api_deploy.py,sha256=h8r_CjsQo4RXzBN4Q8DqoPh6e7JfNDoXdcxT1nrsaRQ,6965
-contentctl/actions/convert.py,sha256=0KBWLxvP1hSPXpExePqpOQPRvlQLamvPLyQqeTIWNbk,704
-contentctl/actions/detection_testing/DataManipulation.py,sha256=k-1OOvoud_T1WbIE7Q2-EQGxVdbYyEn-51YmzGEmSn0,5580
-contentctl/actions/detection_testing/DetectionTestingManager.py,sha256=bGcbnH8dVACexhzJJrIlLjkMnrtSEhXgYOtzX9q2dXM,7257
-contentctl/actions/detection_testing/GitService.py,sha256=Ii5lj0WCk6z6Kurj0AONu_iYcdkLveHG83lSWIpAA3U,11155
-contentctl/actions/detection_testing/generate_detection_coverage_badge.py,sha256=N5mznaeErVak3mOBwsd0RDBFJO3bku0EZvpayCyU-uk,2259
-contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructure.py,sha256=eeVsPz07FHa79tDbaH-uwX_7xVG-yQHxLkIg6O43csk,53389
-contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureContainer.py,sha256=lwjYWFZKIYt6yx2G3wPhtlyAfWOMZ8fuMz3jYLm-gJ4,5327
-contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureServer.py,sha256=Q1ZfCYOp54O39bgTScZMInkmZiU-bGAM9Hiwr2mq5ms,370
-contentctl/actions/detection_testing/progress_bar.py,sha256=OK9oRnPlzPAswt9KZNYID-YLHxqaYPY821kIE4-rCeA,3244
-contentctl/actions/detection_testing/views/DetectionTestingView.py,sha256=4yJLnkzKLF36c0-fjRAU2kRjMmPTQgR6itPZjdN4azQ,7015
-contentctl/actions/detection_testing/views/DetectionTestingViewCLI.py,sha256=Mos0VV2CTSHtIqMPLwtEJlMEU7LE7TXFjM6GUA1G6hM,2050
-contentctl/actions/detection_testing/views/DetectionTestingViewFile.py,sha256=X1U_CYXMtwZFSHRrUwUMCo9L3m9YCcNbc1Dt46Xwunc,1386
-contentctl/actions/detection_testing/views/DetectionTestingViewWeb.py,sha256=6mecacXFoTJxcHiRZSnlHos5Hca1jdedEEZfiIAhaJg,4706
-contentctl/actions/doc_gen.py,sha256=CpZkPOd-9JVTBxbW_rfNY4Ql7kr1eoMuljlxNaBlVVw,857
-contentctl/actions/generate.py,sha256=uDQL-QbsaakchKD_BAAEYiG2JWQ89b6amISccMGnXng,5273
-contentctl/actions/initialize.py,sha256=BTtmFiBmzD7YI95U2HsEqyNm9WWBsap7i2Q6yAu5AaA,3102
-contentctl/actions/initialize_old.py,sha256=0qXbW_fNDvkcnEeL6Zpte8d-hpTu1REyzHsXOCY-YB8,9333
-contentctl/actions/new_content.py,sha256=VPCviaA9E1GwqxpXApbpsumFaGkD1jZRP22CJ06rnRI,992
-contentctl/actions/release_notes.py,sha256=8VbVJlPsTRopWGKgGMGziU5JwsbMs0u8NByGuU16BUc,10193
-contentctl/actions/reporting.py,sha256=OQ6FkBO0kExBQYmO9ZPTb_yQa0cjdCLxcj1ET__uOxk,1102
-contentctl/actions/test.py,sha256=Z9TxLLi5kJxUBLPalemVQBPyoBpXaT6LD6Uxg7QKAN0,3863
-contentctl/actions/validate.py,sha256=Id0SsM-3pY2hPPIjSlct65Ku_kCs3FHsvdtkz6oeixw,2595
-contentctl/contentctl.py,sha256=mi8awd5LNc1w1XWihOLx7zA5iD_uZuE2WpnJ4avaNwI,31622
-contentctl/enrichments/attack_enrichment.py,sha256=iMgLwr8bP2OD9cDmvsH69h8z7VS0urpebZOuyEuz0qE,4392
-contentctl/enrichments/cve_enrichment.py,sha256=hqy5V5TTWYMgsXnmzl9a911BdNe-zovWVl1rZYkyOwY,3242
-contentctl/enrichments/splunk_app_enrichment.py,sha256=zDNHFLZTi2dJ1gdnh0sHkD6F1VtkblqFnhacFcCMBfc,3418
-contentctl/helper/config_handler.py,sha256=VQjs_u0yRTZ6oei0MP-lSk86a_pZjZxxiaMjexqh_k4,3032
-contentctl/helper/link_validator.py,sha256=_qEZ5DljHScbEr_tLWSSviogWEDiDWi35HQtype9EPU,7238
-contentctl/helper/logger.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-contentctl/helper/utils.py,sha256=IDFzF7IolPg6bKx3QJWboxy4q-9t1u6e4BFCD7xLtzQ,15577
-contentctl/input/backend_splunk_ba.py,sha256=Y70tJqgaUM0nzfm2SiGMof4HkhY84feqf-xnRx1xPb4,5861
-contentctl/input/baseline_builder.py,sha256=gzuOJgOCmm_0f5m357pocwWhTaLItr6UgHrNQ06-EaA,2472
-contentctl/input/basic_builder.py,sha256=VDQBPtCx3RV1q982KvG5QL-0kzLwvR8hRulWAJB6bHU,2270
-contentctl/input/detection_builder.py,sha256=BHPOaYjcAk5fcLA_nnjT14Ft7SXH0XXNXVnWbxA9hbQ,18813
-contentctl/input/director.py,sha256=DypT0GLH0iMVosPECe-w4Rg33MwSZh0IBrOovqmqibw,13161
-contentctl/input/investigation_builder.py,sha256=qcvwKr0xZf5LMJl2IJ6ZZ5wWcAZrFIAQzUb6bEeTNX8,1244
-contentctl/input/new_content_generator.py,sha256=J1s2uJVVgJ1iU-XF2cHlvCkLn4IeewpuO4fGbcvuaLM,4979
-contentctl/input/new_content_questions.py,sha256=AJddiYnj0rz9TX2Gm-eQ1xd_mG-Kx7V6eBl9YlwWe6Q,5610
-contentctl/input/playbook_builder.py,sha256=B5V5HFuaXP6cyYSL7nCtBWUa5Pnn4wJWjD1VCMj3aQA,2100
-contentctl/input/sigma_converter.py,sha256=vq2UmduSlykLK-Wb7rWmuRepwmQZk8ohaTay9OJvnuE,19512
-contentctl/input/ssa_detection_builder.py,sha256=CScS6DkvGKstWw8GkFL1hVckDHUDkmmoK5zmBh2S5r8,7584
-contentctl/input/story_builder.py,sha256=b-QTyMVxLZUAnFhOs92MKFCLfDb8_ls5b07X1GlDO-I,4755
-contentctl/input/yml_reader.py,sha256=xLL9lP5p5zeogJAs36LL73V5tVcO_-G_UpDRwXhb-cA,1385
-contentctl/objects/abstract_security_content_objects/detection_abstract.py,sha256=OxcvnaU8b_LvuEIjlD-T1dAJIucTjmwi-VvS_mbM3yo,15307
-contentctl/objects/abstract_security_content_objects/security_content_object_abstract.py,sha256=bSi93P4GzZNfQFL-RkQ8X-0J0KY6RqwSQJmtXGsJQSA,3015
-contentctl/objects/app.py,sha256=nIoWBIFJqNMj0jrIg37XaDi7oTuRAnmzW3otwPNfI2Y,7519
-contentctl/objects/base_test.py,sha256=6hCL9K-N_jJx1zLbuZQCsB93_XWj6JcGGs2PbbjzJWo,1028
-contentctl/objects/base_test_result.py,sha256=dPupudgeXW64Emk9YJfS5JhUXbZwpEZrrx_DiqbRgvU,4752
-contentctl/objects/baseline.py,sha256=tqfhJmWmbP5yWoM7aIstRw1dPq5DR9yIvpfdzl94o-Y,1931
-contentctl/objects/baseline_tags.py,sha256=38dz_bQt9CH0803jiKZKk1DO7xnNvQU2ZFGE9fqeVAk,711
-contentctl/objects/config.py,sha256=XP6gOV_DAMHakzQrGDOlAIbyHUd7a4R9T0Sc6ebigb8,6069
-contentctl/objects/constants.py,sha256=DqO06lslq5qy7FtFtnEl689HwexrrxfwjPtzXMHAUvw,3518
-contentctl/objects/correlation_search.py,sha256=ZcjiTHnVFJ6JmwnegerAiDCm0aanjNUGQZM1KSaKMz4,36903
-contentctl/objects/data_source.py,sha256=hfAGFsk62MwqqfJ93H5wnZtHV8Fy3S55XegpcKwaD_c,434
-contentctl/objects/deployment.py,sha256=-iWvhDt-V5ez47iqBjaNtxZ1h4UaLaH32cUGpOJOp6U,1137
-contentctl/objects/deployment_email.py,sha256=Xom4vHGPnybsMZpB54O_l98svxGFt3Q7LKCwGllE7Gw,141
-contentctl/objects/deployment_notable.py,sha256=hogM5NkQNF7m0xH8dRruHr2v-b58eLxSgjPciKcbNIk,164
-contentctl/objects/deployment_phantom.py,sha256=KU-Iqev-xSh_1S00EXmPMcUSLDzefG4OGJXJtYK3li4,201
-contentctl/objects/deployment_rba.py,sha256=FLWlxkTyuTRpzHDPRxIbLB5me0IlWbbUAr0tw1uGN1c,111
-contentctl/objects/deployment_scheduling.py,sha256=VQ1m3YEAoQkme5qsXhTJBvWVzguntUNqIJRRjf9qtK4,193
-contentctl/objects/deployment_slack.py,sha256=TYDTuwtO0ag9z1Pr7TdAubqXXXMdZA0siQ9wNPShIPI,129
-contentctl/objects/detection.py,sha256=uhPMuDfxEvpemjUNQNJmgTk19XUVfWLzf5jy0nPwO3k,644
-contentctl/objects/detection_tags.py,sha256=3jQcGo2X8fCHHF_EdnQDuALYcJ4i_fyFgowJZaeAt1U,6338
-contentctl/objects/enums.py,sha256=3W_5snP0fYtU6OaqLxCt5i2WOG7IEOp2HO2R7svFA1w,2963
-contentctl/objects/integration_test.py,sha256=iepDf39fc1Dr58_Adtgyf4uH1446XvyhEzNKjI8pDuw,1285
-contentctl/objects/integration_test_result.py,sha256=Gi7017H0H_9Jns2p-kuYVZqWrO527YpuPxxkTYriX3g,429
-contentctl/objects/investigation.py,sha256=PyTDxqUrae5_GFC6hTd1Aubkxyysbl6oiI0Vqd4TrrQ,2151
-contentctl/objects/investigation_tags.py,sha256=hpjGxr8DrddnptOKdz4clsZYMmaXl6gr5kcCj8QU748,191
-contentctl/objects/lookup.py,sha256=S1lr-9mm60hYbdORHTtlSckAj9w0Xl6wSpGTAjiIrsI,2397
-contentctl/objects/macro.py,sha256=AjekxIRoFYym3SpTddBWXYfQ_tlwOQMBjtKz56oCn8M,3255
-contentctl/objects/mitre_attack_enrichment.py,sha256=ywuk8VZtPa1U7iDj1AvAN_Oc-oH8r4CNw7HWrNGfXLA,219
-contentctl/objects/notable_action.py,sha256=ValkblBaG-60TF19y_vSnNzoNZ3eg48wIfr0qZxyKTA,1605
-contentctl/objects/observable.py,sha256=ouMhYKRtxL160Ueh8D527C5Ts8Ji33zs-vyENslZlMg,1288
-contentctl/objects/playbook.py,sha256=6e6nBP7AIkgtHxzPjgPXaCPLMnTar_-z8db0QdFwTjg,1081
-contentctl/objects/playbook_tags.py,sha256=Z9JOkNe5FpNi1zdR7Yb_22yYMYaLdxNjQBK2c4bETGY,315
-contentctl/objects/repo_config.py,sha256=qQ9ZgvvIDQ0lLbIxwBhtRfqn9A99rBk3vE0-wbLy-20,6353
-contentctl/objects/risk_analysis_action.py,sha256=bySNQX5SBIR8L7SDnlTQr_Jn29YqrPFZtSc0KxQox4Y,4288
-contentctl/objects/risk_object.py,sha256=yY4NmEwEKaRl4sLzCRZb1n8kdpV3HzYbQVQ1ClQWYHw,904
-contentctl/objects/security_content_object.py,sha256=63PzluNOF5ZNwqAtzKCciEQzWS_NA37QSkByfX_H_M4,325
-contentctl/objects/ssa_detection.py,sha256=g-2YtG3y_ZQ7L2MGOtyogUbNqSJRxXewHLQ1R99mK_A,5806
-contentctl/objects/ssa_detection_tags.py,sha256=owTObHBg6t4kr2k584yjBdhDKjOinGYnsOlt2b3qgcg,5668
-contentctl/objects/story.py,sha256=SKrDsJh0Rc2Ob5ihlaE5u34tIWs_KlmlFu6P5riQTnA,1532
-contentctl/objects/story_tags.py,sha256=BAdXg-WcAPZAhOIqP9r_ikL1h3nEasCsXfFlwo400KQ,1213
-contentctl/objects/test_config.py,sha256=YMxduT4dRhnKp6mgH95IWuUXNOOjkCn3xFG6s7W1Q74,25020
-contentctl/objects/test_group.py,sha256=Yb1sqGom6SkVL8B3czPndz8w3CK8WdwZ39V_cn0_JZQ,2600
-contentctl/objects/threat_object.py,sha256=S8B7RQFfLxN_g7yKPrDTuYhIy9JvQH3YwJ_T5LUZIa4,711
-contentctl/objects/unit_test.py,sha256=fd5ijundoALpSioY16U6f9LZ0PBOQOoUolc82b6esEg,1412
-contentctl/objects/unit_test_attack_data.py,sha256=tbqMNN5ThAUFr6o1E1Kt40UMf3RrHBoX8fgxBgs3aRg,606
-contentctl/objects/unit_test_baseline.py,sha256=MeNJlArRuLWpLdHGLIUNMR-wyw_fAR94PdBuX0Dj1co,255
-contentctl/objects/unit_test_old.py,sha256=JMnNtL2H_wGWam2RKfSX9kh1fVsHreyoqzK3xu_-s6E,182
-contentctl/objects/unit_test_result.py,sha256=lTSG6LFQGYxERJ4Cg6mB0_uOJeIMVYcN6fiLAHgWMuU,2874
-contentctl/output/api_json_output.py,sha256=nnWBJctTaPpl6O-SIs-BR-5GlOGkclue1Bg4ntjixW4,6174
-contentctl/output/attack_nav_output.py,sha256=g4qlH0v6NzXc5InG7xNEM6DeRmlCgTzSUybbB9EHaC4,1701
-contentctl/output/attack_nav_writer.py,sha256=T3K4rBjXti-1ytPfXO-XoOijMHuoa9B2dKXGipPCjCA,2130
-contentctl/output/ba_yml_output.py,sha256=plxtZ39-Gctc9Yw0Uz0smbfHCKedthUaKi8FVT5bdkY,5938
-contentctl/output/conf_output.py,sha256=YRUffHFdLjXvI6uTeA5Cs-XAh3J31JAATglCAgpGwKU,24175
-contentctl/output/conf_writer.py,sha256=WazoJc3WPIlNenbsE7FzlQ3XuLnAAZBtGSs4l1PjLKE,2960
-contentctl/output/detection_writer.py,sha256=AzxbssNLmsNIOaYKotew5-ONoyq1cQpKSGy3pe191B0,960
-contentctl/output/doc_md_output.py,sha256=gf7osH1uSrC6js3D_I72g4uDe9TaB3tsvtqCHi5znp0,3238
-contentctl/output/finding_report_writer.py,sha256=Me6FtvDbmSSRqYr5rtrtuc5YVze48PyPbrjyAXJ-V4A,3935
-contentctl/output/jinja_writer.py,sha256=FzfOvupSsZU-bExxfDfGLussyFYTBCgJNcUmIa6ZvwA,1089
-contentctl/output/json_writer.py,sha256=d3mZrjaVl2bmxDF1x6-SHD6LyXZ3iZwNpmSnCjOTk_A,209
-contentctl/output/new_content_yml_output.py,sha256=RD0eYGmp3P0gyXm8lOpEulsFVgBPOO5BRL7b9z8B_zc,2254
-contentctl/output/svg_output.py,sha256=1RZx2SWXgdhcWsYwo3gXfOUCqxWqgT4cpqV7QqbJQv0,3084
-contentctl/output/templates/analyticstories_detections.j2,sha256=W_O8UgthDBn0eYPHocI6cXhzWyaVcL4cnua7MH-PUh0,745
-contentctl/output/templates/analyticstories_investigations.j2,sha256=3xmHOgmphObpoEpsyOrzOOat2_oMs9CZ-Jb0n7TJm9g,496
-contentctl/output/templates/analyticstories_stories.j2,sha256=hov2h8tWuinEQcL1qROLDTAI3N6M88oEfHasEX9012A,592
-contentctl/output/templates/app.conf.j2,sha256=C2yVgrh76BoHZC9t_AdYXKwJt6T-suP7i3cVH-YjSKI,717
-contentctl/output/templates/app.manifest.j2,sha256=N1zcYB0Ih1OezSilcOp1GHCkWsrUiValKlXV3Ke34rI,1047
-contentctl/output/templates/collections.j2,sha256=rDpAcqM6hRiyCQPgfRh8KcL41Mrqsc97krQ-JPFhSBQ,181
-contentctl/output/templates/content-version.j2,sha256=2-it0TF5BvqUcmUXVFB4DEh0I01igQGDxZNJpdtDFIA,54
-contentctl/output/templates/detection_count.j2,sha256=9U3o-P_ECkMknsooj_L3B9GZqjnsbaEzr59s3-DOK0I,670
-contentctl/output/templates/detection_coverage.j2,sha256=jOSBzYrLEToqzieihQlle7sYFPv1GtRWtYLq_bAOufc,671
-contentctl/output/templates/doc_detection_page.j2,sha256=OidLmuDtzP59HZUkn7dEpwZWrflvA4EWEsyGsHT3x6c,1002
-contentctl/output/templates/doc_detections.j2,sha256=IStV-dtsjgE8XncrApNjaeuInx6wNXN9kLkAZLWjyZ8,6586
-contentctl/output/templates/doc_navigation.j2,sha256=h25ITC3xcAM17uZGIyyDFURmEdYtQSPvNeWN3RH7j4Q,1471
-contentctl/output/templates/doc_navigation_pages.j2,sha256=ptfjbD4F0Ob7dze9at2q5gqOslcbL3eteUO1zsblDJo,203
-contentctl/output/templates/doc_playbooks.j2,sha256=CWsnm8F097oYT8anW3CE7JaX1haAJTfylThP1ic0UIw,1681
-contentctl/output/templates/doc_playbooks_page.j2,sha256=2d5UNDSOxyMtxKGxGHzJ2Ny_UrqTq267NO1h-lmNduc,679
-contentctl/output/templates/doc_stories.j2,sha256=2UksQt2psSD2G_ITGSjSYTncezxDhOdbbz8RvsyAE7Q,1822
-contentctl/output/templates/doc_story_page.j2,sha256=jrf-As8GbqLarRoiDipfM9ZUVRl_bhdNsy-XaCrBaXE,874
-contentctl/output/templates/es_investigations_investigations.j2,sha256=7vZBLaqvStzV6UcDbHQ74zdQyRSuglaZACh_tP39wDY,994
-contentctl/output/templates/es_investigations_stories.j2,sha256=jvQm6d6GHngR4-ypX2s35VIyXvEPrVEtM94hdduSICk,369
-contentctl/output/templates/finding_report.j2,sha256=DS9ElRGeyz7UFPiTXiqbhUzOrT4eN8oetdBheQJRFck,1753
-contentctl/output/templates/header.j2,sha256=mIXpnkuUxnb_7wX0iLNqB3aM3rZfvW1WH0gZzG9GKMY,177
-contentctl/output/templates/macros.j2,sha256=s_cFfdXzksAzrQp5cgalZZOLqinN9o5c-1I07x4EDEU,424
-contentctl/output/templates/macros_detections.j2,sha256=c-BsFcCFSrYX6F5Rwbfe_q6fmXQa4XywIlxTVhnQXag,282
-contentctl/output/templates/panel.j2,sha256=Cw_W6p-14n6UivVfpS75KKJiJ2VpdGsSBceYsUYe9gk,221
-contentctl/output/templates/savedsearches_baselines.j2,sha256=PtQNhroklFyAxa9fFqq7TlvrREaGaU5qwo7-r4ogsI0,1645
-contentctl/output/templates/savedsearches_detections.j2,sha256=-dHASTntre-gb8UO-t9bNkL66inmJT8ty1_T1MJWH0g,6288
-contentctl/output/templates/savedsearches_investigations.j2,sha256=ZVvAxBaqPSA89Zlf54QSjUHrZU-0OOI08PL_HToAW4Y,1180
-contentctl/output/templates/splunk_app/README/essoc_story_detail.txt,sha256=7hFPBfPpRH28TFl7QchKceZLewQqgFjRWDlmxZzwpmo,897
-contentctl/output/templates/splunk_app/README/essoc_summary.txt,sha256=u6wYNYBqmmm7Kn_g_Uex8rRzMQ995MUXCavla95Y1dw,2538
-contentctl/output/templates/splunk_app/README/essoc_usage_dashboard.txt,sha256=xYUKKVtdgzPyT3mqdTccaBZuwWnC63lbc9zyYpmHN4o,2432
-contentctl/output/templates/splunk_app/README.md,sha256=56-FYygrv-A5bXEaeqr5vwP70Z1MBDTlOw5vHOmG5-k,467
-contentctl/output/templates/splunk_app/default/analytic_stories.conf,sha256=zWuCOOl8SiP7Kit2s-de4KRu3HySLtBSXcp1QnJx0ec,168
-contentctl/output/templates/splunk_app/default/app.conf,sha256=eTSq1QI4-BgylZJgnNVg5jQCZFXJVNyEJA33lQAgYoc,685
-contentctl/output/templates/splunk_app/default/commands.conf,sha256=U2ccwUeGXKKKt5jo14QY5swi-p9_TSJtaNquOkeF3Yk,319
-contentctl/output/templates/splunk_app/default/content-version.conf,sha256=TGzX6qLdzRK7x6b0y5AE8ZF59PLU-DrRfS43fVWITqo,34
-contentctl/output/templates/splunk_app/default/data/ui/nav/default.xml,sha256=e6pZOhO4jz7C-LyVqhgZR6iAR51JTLG7oXFzMZNM93E,208
-contentctl/output/templates/splunk_app/default/data/ui/views/escu_summary.xml,sha256=jQhkIthPgEEptCJ2wUCj2lWGHBvUl6JGsKkDfONloxI,8635
-contentctl/output/templates/splunk_app/default/data/ui/views/feedback.xml,sha256=uM71EMK2uFz8h68nOTNKGnYxob3HhE_caSL6yA-3H-k,696
-contentctl/output/templates/splunk_app/default/distsearch.conf,sha256=5fa9bNr9WuVI2_8tTIftvrRwk27Oz3rUoKh6_xlASFw,156
-contentctl/output/templates/splunk_app/default/usage_searches.conf,sha256=mFnhAHGhFHIzl8xxA626thnAjyxs5ZQQfur1PP_Xmbg,4257
-contentctl/output/templates/splunk_app/default/use_case_library.conf,sha256=zWuCOOl8SiP7Kit2s-de4KRu3HySLtBSXcp1QnJx0ec,168
-contentctl/output/templates/splunk_app/metadata/default.meta,sha256=tcYHZkDF44ApDoDQ_rp8MCA8cuT3DVd5atHgulR1Tvc,423
-contentctl/output/templates/splunk_app/static/appIcon.png,sha256=jcJ1PNdkBX7Kl_y9Tf0SZ55OJYA2PpwjvkVvBt9_OoE,3658
-contentctl/output/templates/splunk_app/static/appIconAlt.png,sha256=uRXjoHQQjs0-BxcK-3KNBEdck1adDNTHMvV14xR4W0g,2656
-contentctl/output/templates/splunk_app/static/appIconAlt_2x.png,sha256=I0m-CPRqq7ak9NJQZGGmz6Ac4pmzFV_SonOUxOEDOFs,7442
-contentctl/output/templates/splunk_app/static/appIcon_2x.png,sha256=XEpqQzDvzuEV5StzD05XRgxwySqHHLes1hMPy2v5Vdk,3657
-contentctl/output/templates/transforms.j2,sha256=sEpVMOpcSLL-nK-aZEVbGjGzLZ9D1P9nVYQh39YAAwQ,1416
-contentctl/output/templates/workflow_actions.j2,sha256=DFoZVnCa8dMRHjW2AdpoydBC0THgiH_W-Nx7WI4-uR4,925
-contentctl/output/yml_output.py,sha256=xtTD3f_WWy8O6Joi4S8gG9paot8JpQFRlwt17_ek5B4,2682
-contentctl/output/yml_writer.py,sha256=izq1DMP_QPlY5srKoOTIZTNGRAGTCKMI-4YN4mf4CiU,240
-contentctl/templates/README,sha256=Hg4LI9g_ss8o3u060woDkhunLXHMtKOhuFK2i-xJpuM,133
-contentctl/templates/app_default.yml,sha256=kDeYdJbfMADQPcho8iH1nqgTFrHNt4EXnIJjPHc2unI,6390
-contentctl/templates/datamodels_cim.conf,sha256=RB_SCtpQG_KaC_0lKTCKexVOlEq_ShGwpGlg95aqOfs,9381
-contentctl/templates/datamodels_custom.conf,sha256=6BANthXdqg3fYpYmEqiGZnv4cWheNfXz1uQ_I1JePXc,480
-contentctl/templates/deployments/00_default_anomaly.yml,sha256=z5vCSfuDJtY2oxvOK_PBjlByCys26vjaEs_oCBUr3t8,426
-contentctl/templates/deployments/00_default_baseline.yml,sha256=dEiwlr2sYMUPNUK7HiB32vwBFXVPFdxRY-9LoD6bKAA,342
-contentctl/templates/deployments/00_default_correlation.yml,sha256=FjRP4Niw-p5MsksJ9LWrbmkfp1dduQtHW2GIqULpMdQ,528
-contentctl/templates/deployments/00_default_hunting.yml,sha256=w58y8AWbvHo4WrCH_3v5rW2anUCU2w6GsS3A_Iv8pMQ,336
-contentctl/templates/deployments/00_default_ttp.yml,sha256=x33u30no3zBloJBvIC7XbgWQ9Cuyi7Ev47AsBs6azi0,556
-contentctl/templates/detections/anomalous_usage_of_7zip.yml,sha256=KeSofQJ_YvLYTKcgxsRdbmi00xc6eb3ZeRDpr2MvFHw,3342
-contentctl/templates/macros/security_content_ctime.yml,sha256=Gg1YNllHVsX_YB716H1SJLWzxXZEfuJlnsgB2fuyoHU,159
-contentctl/templates/macros/security_content_summariesonly.yml,sha256=9BYUxAl2E4Nwh8K19F3AJS8Ka7ceO6ZDBjFiO3l3LY0,162
-contentctl/templates/stories/cobalt_strike.yml,sha256=b2WW3uj-4w6GTUzOVaqQZAoLZ1lQGGPK8M3bBwnSq-4,3095
-contentctl-3.6.0.dist-info/LICENSE.md,sha256=hQWUayRk-pAiOZbZnuy8djmoZkjKBx8MrCFpW-JiOgo,11344
-contentctl-3.6.0.dist-info/METADATA,sha256=kF6QpFAZ4Lv8_PMvn79htiN2hSP6w0YeA6NNO1YLjMY,18805
-contentctl-3.6.0.dist-info/WHEEL,sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg,88
-contentctl-3.6.0.dist-info/entry_points.txt,sha256=5bjZ2NkbQfSwK47uOnA77yCtjgXhvgxnmCQiynRF_-U,57
-contentctl-3.6.0.dist-info/RECORD,,