contentctl 4.0.1__py3-none-any.whl → 4.0.2__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- contentctl/output/conf_writer.py +1 -1
- contentctl/output/templates/es_investigations_investigations.j2 +11 -11
- {contentctl-4.0.1.dist-info → contentctl-4.0.2.dist-info}/METADATA +1 -1
- {contentctl-4.0.1.dist-info → contentctl-4.0.2.dist-info}/RECORD +7 -7
- {contentctl-4.0.1.dist-info → contentctl-4.0.2.dist-info}/LICENSE.md +0 -0
- {contentctl-4.0.1.dist-info → contentctl-4.0.2.dist-info}/WHEEL +0 -0
- {contentctl-4.0.1.dist-info → contentctl-4.0.2.dist-info}/entry_points.txt +0 -0
contentctl/output/conf_writer.py
CHANGED
|
@@ -7,14 +7,14 @@ disabled = 0
|
|
|
7
7
|
tokens = {\
|
|
8
8
|
{% for token in response_task.inputs %}
|
|
9
9
|
{% if token == 'user' %}
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
}
|
|
10
|
+
"user": {\
|
|
11
|
+
"valuePrefix": "\"",\
|
|
12
|
+
"valueSuffix": "\"",\
|
|
13
|
+
"delimiter": " OR {{ token }}=",\
|
|
14
|
+
"valueType": "primitive",\
|
|
15
|
+
"value": "identity",\
|
|
16
|
+
"default": "null"\
|
|
17
|
+
}{% elif token == 'dest'%}
|
|
18
18
|
"dest": {\
|
|
19
19
|
"valuePrefix": "\"",\
|
|
20
20
|
"valueSuffix": "\"",\
|
|
@@ -22,7 +22,7 @@ tokens = {\
|
|
|
22
22
|
"valueType": "primitive",\
|
|
23
23
|
"value": "asset",\
|
|
24
24
|
"default": "null"\
|
|
25
|
-
}
|
|
25
|
+
}{% else %}
|
|
26
26
|
"{{ token }}": {\
|
|
27
27
|
"valuePrefix": "\"",\
|
|
28
28
|
"valueSuffix": "\"",\
|
|
@@ -30,9 +30,9 @@ tokens = {\
|
|
|
30
30
|
"valueType": "primitive",\
|
|
31
31
|
"value": "file",\
|
|
32
32
|
"default": "null"\
|
|
33
|
-
}
|
|
33
|
+
}{% endif %}{{ "," if not loop.last }}\
|
|
34
34
|
{% endfor %}
|
|
35
|
-
|
|
35
|
+
}\
|
|
36
36
|
|
|
37
37
|
|
|
38
38
|
{% endfor %}
|
|
@@ -90,7 +90,7 @@ contentctl/output/attack_nav_output.py,sha256=95iKV8U9BMMgqh6cCOw1S89Ln73xmJGgJP
|
|
|
90
90
|
contentctl/output/attack_nav_writer.py,sha256=64ILZLmNbh2XLmbopgENkeo6t-4SRRG8xZXBmtpNd4g,2219
|
|
91
91
|
contentctl/output/ba_yml_output.py,sha256=Lrk13Q9-f71i3c0oNrT50G94PxdogG4k4-MI-rTMOAo,5950
|
|
92
92
|
contentctl/output/conf_output.py,sha256=qCRT77UKNFCe4AufeBV8Uz9lkPqgpGzU1Y149RuEnis,10147
|
|
93
|
-
contentctl/output/conf_writer.py,sha256=
|
|
93
|
+
contentctl/output/conf_writer.py,sha256=2TaCAPEtU-bMa7A2m7xOxh93PMpzIdhwiHiPLUCeCB4,8281
|
|
94
94
|
contentctl/output/detection_writer.py,sha256=AzxbssNLmsNIOaYKotew5-ONoyq1cQpKSGy3pe191B0,960
|
|
95
95
|
contentctl/output/doc_md_output.py,sha256=gf7osH1uSrC6js3D_I72g4uDe9TaB3tsvtqCHi5znp0,3238
|
|
96
96
|
contentctl/output/finding_report_writer.py,sha256=Me6FtvDbmSSRqYr5rtrtuc5YVze48PyPbrjyAXJ-V4A,3935
|
|
@@ -115,7 +115,7 @@ contentctl/output/templates/doc_playbooks.j2,sha256=CWsnm8F097oYT8anW3CE7JaX1haA
|
|
|
115
115
|
contentctl/output/templates/doc_playbooks_page.j2,sha256=2d5UNDSOxyMtxKGxGHzJ2Ny_UrqTq267NO1h-lmNduc,679
|
|
116
116
|
contentctl/output/templates/doc_stories.j2,sha256=0J3dAbfSZz-Ma1-C9B6vYPKGwrxoZryYoudy3wUIT4s,1827
|
|
117
117
|
contentctl/output/templates/doc_story_page.j2,sha256=jrf-As8GbqLarRoiDipfM9ZUVRl_bhdNsy-XaCrBaXE,874
|
|
118
|
-
contentctl/output/templates/es_investigations_investigations.j2,sha256=
|
|
118
|
+
contentctl/output/templates/es_investigations_investigations.j2,sha256=M4beFAFrkdhOIda2uYOXOxm9eBTdtSrTg07ke8FcELs,1013
|
|
119
119
|
contentctl/output/templates/es_investigations_stories.j2,sha256=3_adGXuyMR6v-k3uc6_ht13UqX1AI4HagRdokwW0tqk,388
|
|
120
120
|
contentctl/output/templates/finding_report.j2,sha256=DS9ElRGeyz7UFPiTXiqbhUzOrT4eN8oetdBheQJRFck,1753
|
|
121
121
|
contentctl/output/templates/header.j2,sha256=3usV7jm1q6J-QNnQrZzII9cN0XEGQjg_eVKrEQwfOG0,201
|
|
@@ -161,8 +161,8 @@ contentctl/templates/detections/anomalous_usage_of_7zip.yml,sha256=hkN214ZOqbQPW
|
|
|
161
161
|
contentctl/templates/macros/security_content_ctime.yml,sha256=Gg1YNllHVsX_YB716H1SJLWzxXZEfuJlnsgB2fuyoHU,159
|
|
162
162
|
contentctl/templates/macros/security_content_summariesonly.yml,sha256=9BYUxAl2E4Nwh8K19F3AJS8Ka7ceO6ZDBjFiO3l3LY0,162
|
|
163
163
|
contentctl/templates/stories/cobalt_strike.yml,sha256=rlaXxMN-5k8LnKBLPafBoksyMtlmsPMHPJOjTiMiZ-M,3063
|
|
164
|
-
contentctl-4.0.
|
|
165
|
-
contentctl-4.0.
|
|
166
|
-
contentctl-4.0.
|
|
167
|
-
contentctl-4.0.
|
|
168
|
-
contentctl-4.0.
|
|
164
|
+
contentctl-4.0.2.dist-info/LICENSE.md,sha256=hQWUayRk-pAiOZbZnuy8djmoZkjKBx8MrCFpW-JiOgo,11344
|
|
165
|
+
contentctl-4.0.2.dist-info/METADATA,sha256=xGbT6aNeYGB-__vB1wrMih-Jz2Sb_A8xKb-x3i39QGY,19705
|
|
166
|
+
contentctl-4.0.2.dist-info/WHEEL,sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg,88
|
|
167
|
+
contentctl-4.0.2.dist-info/entry_points.txt,sha256=5bjZ2NkbQfSwK47uOnA77yCtjgXhvgxnmCQiynRF_-U,57
|
|
168
|
+
contentctl-4.0.2.dist-info/RECORD,,
|
|
File without changes
|
|
File without changes
|
|
File without changes
|