contentctl 4.0.1__py3-none-any.whl → 4.0.3__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- contentctl/output/conf_writer.py +1 -1
- contentctl/output/templates/es_investigations_investigations.j2 +11 -11
- {contentctl-4.0.1.dist-info → contentctl-4.0.3.dist-info}/METADATA +4 -3
- {contentctl-4.0.1.dist-info → contentctl-4.0.3.dist-info}/RECORD +7 -7
- {contentctl-4.0.1.dist-info → contentctl-4.0.3.dist-info}/LICENSE.md +0 -0
- {contentctl-4.0.1.dist-info → contentctl-4.0.3.dist-info}/WHEEL +0 -0
- {contentctl-4.0.1.dist-info → contentctl-4.0.3.dist-info}/entry_points.txt +0 -0
contentctl/output/conf_writer.py
CHANGED
|
@@ -7,14 +7,14 @@ disabled = 0
|
|
|
7
7
|
tokens = {\
|
|
8
8
|
{% for token in response_task.inputs %}
|
|
9
9
|
{% if token == 'user' %}
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
}
|
|
10
|
+
"user": {\
|
|
11
|
+
"valuePrefix": "\"",\
|
|
12
|
+
"valueSuffix": "\"",\
|
|
13
|
+
"delimiter": " OR {{ token }}=",\
|
|
14
|
+
"valueType": "primitive",\
|
|
15
|
+
"value": "identity",\
|
|
16
|
+
"default": "null"\
|
|
17
|
+
}{% elif token == 'dest'%}
|
|
18
18
|
"dest": {\
|
|
19
19
|
"valuePrefix": "\"",\
|
|
20
20
|
"valueSuffix": "\"",\
|
|
@@ -22,7 +22,7 @@ tokens = {\
|
|
|
22
22
|
"valueType": "primitive",\
|
|
23
23
|
"value": "asset",\
|
|
24
24
|
"default": "null"\
|
|
25
|
-
}
|
|
25
|
+
}{% else %}
|
|
26
26
|
"{{ token }}": {\
|
|
27
27
|
"valuePrefix": "\"",\
|
|
28
28
|
"valueSuffix": "\"",\
|
|
@@ -30,9 +30,9 @@ tokens = {\
|
|
|
30
30
|
"valueType": "primitive",\
|
|
31
31
|
"value": "file",\
|
|
32
32
|
"default": "null"\
|
|
33
|
-
}
|
|
33
|
+
}{% endif %}{{ "," if not loop.last }}\
|
|
34
34
|
{% endfor %}
|
|
35
|
-
|
|
35
|
+
}\
|
|
36
36
|
|
|
37
37
|
|
|
38
38
|
{% endfor %}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.1
|
|
2
2
|
Name: contentctl
|
|
3
|
-
Version: 4.0.
|
|
3
|
+
Version: 4.0.3
|
|
4
4
|
Summary: Splunk Content Control Tool
|
|
5
5
|
License: Apache 2.0
|
|
6
6
|
Author: STRT
|
|
@@ -14,7 +14,7 @@ Requires-Dist: Jinja2 (>=3.1.2,<4.0.0)
|
|
|
14
14
|
Requires-Dist: PyYAML (>=6.0.1,<7.0.0)
|
|
15
15
|
Requires-Dist: attackcti (>=0.3.7,<0.4.0)
|
|
16
16
|
Requires-Dist: bottle (>=0.12.25,<0.13.0)
|
|
17
|
-
Requires-Dist: docker (>=
|
|
17
|
+
Requires-Dist: docker (>=7.1.0,<8.0.0)
|
|
18
18
|
Requires-Dist: gitpython (>=3.1.43,<4.0.0)
|
|
19
19
|
Requires-Dist: pycvesearch (>=1.2,<2.0)
|
|
20
20
|
Requires-Dist: pydantic (>=2.5.1,<3.0.0)
|
|
@@ -22,8 +22,9 @@ Requires-Dist: pygit2 (>=1.14.1,<2.0.0)
|
|
|
22
22
|
Requires-Dist: pysigma (>=0.10.8,<0.11.0)
|
|
23
23
|
Requires-Dist: pysigma-backend-splunk (>=1.0.3,<2.0.0)
|
|
24
24
|
Requires-Dist: questionary (>=2.0.1,<3.0.0)
|
|
25
|
-
Requires-Dist: requests (>=2.
|
|
25
|
+
Requires-Dist: requests (>=2.32.2,<2.33.0)
|
|
26
26
|
Requires-Dist: semantic-version (>=2.10.0,<3.0.0)
|
|
27
|
+
Requires-Dist: setuptools (>=69.5.1,<70.0.0)
|
|
27
28
|
Requires-Dist: splunk-sdk (>=2.0.1,<3.0.0)
|
|
28
29
|
Requires-Dist: tqdm (>=4.66.1,<5.0.0)
|
|
29
30
|
Requires-Dist: tyro (>=0.8.3,<0.9.0)
|
|
@@ -90,7 +90,7 @@ contentctl/output/attack_nav_output.py,sha256=95iKV8U9BMMgqh6cCOw1S89Ln73xmJGgJP
|
|
|
90
90
|
contentctl/output/attack_nav_writer.py,sha256=64ILZLmNbh2XLmbopgENkeo6t-4SRRG8xZXBmtpNd4g,2219
|
|
91
91
|
contentctl/output/ba_yml_output.py,sha256=Lrk13Q9-f71i3c0oNrT50G94PxdogG4k4-MI-rTMOAo,5950
|
|
92
92
|
contentctl/output/conf_output.py,sha256=qCRT77UKNFCe4AufeBV8Uz9lkPqgpGzU1Y149RuEnis,10147
|
|
93
|
-
contentctl/output/conf_writer.py,sha256=
|
|
93
|
+
contentctl/output/conf_writer.py,sha256=2TaCAPEtU-bMa7A2m7xOxh93PMpzIdhwiHiPLUCeCB4,8281
|
|
94
94
|
contentctl/output/detection_writer.py,sha256=AzxbssNLmsNIOaYKotew5-ONoyq1cQpKSGy3pe191B0,960
|
|
95
95
|
contentctl/output/doc_md_output.py,sha256=gf7osH1uSrC6js3D_I72g4uDe9TaB3tsvtqCHi5znp0,3238
|
|
96
96
|
contentctl/output/finding_report_writer.py,sha256=Me6FtvDbmSSRqYr5rtrtuc5YVze48PyPbrjyAXJ-V4A,3935
|
|
@@ -115,7 +115,7 @@ contentctl/output/templates/doc_playbooks.j2,sha256=CWsnm8F097oYT8anW3CE7JaX1haA
|
|
|
115
115
|
contentctl/output/templates/doc_playbooks_page.j2,sha256=2d5UNDSOxyMtxKGxGHzJ2Ny_UrqTq267NO1h-lmNduc,679
|
|
116
116
|
contentctl/output/templates/doc_stories.j2,sha256=0J3dAbfSZz-Ma1-C9B6vYPKGwrxoZryYoudy3wUIT4s,1827
|
|
117
117
|
contentctl/output/templates/doc_story_page.j2,sha256=jrf-As8GbqLarRoiDipfM9ZUVRl_bhdNsy-XaCrBaXE,874
|
|
118
|
-
contentctl/output/templates/es_investigations_investigations.j2,sha256=
|
|
118
|
+
contentctl/output/templates/es_investigations_investigations.j2,sha256=M4beFAFrkdhOIda2uYOXOxm9eBTdtSrTg07ke8FcELs,1013
|
|
119
119
|
contentctl/output/templates/es_investigations_stories.j2,sha256=3_adGXuyMR6v-k3uc6_ht13UqX1AI4HagRdokwW0tqk,388
|
|
120
120
|
contentctl/output/templates/finding_report.j2,sha256=DS9ElRGeyz7UFPiTXiqbhUzOrT4eN8oetdBheQJRFck,1753
|
|
121
121
|
contentctl/output/templates/header.j2,sha256=3usV7jm1q6J-QNnQrZzII9cN0XEGQjg_eVKrEQwfOG0,201
|
|
@@ -161,8 +161,8 @@ contentctl/templates/detections/anomalous_usage_of_7zip.yml,sha256=hkN214ZOqbQPW
|
|
|
161
161
|
contentctl/templates/macros/security_content_ctime.yml,sha256=Gg1YNllHVsX_YB716H1SJLWzxXZEfuJlnsgB2fuyoHU,159
|
|
162
162
|
contentctl/templates/macros/security_content_summariesonly.yml,sha256=9BYUxAl2E4Nwh8K19F3AJS8Ka7ceO6ZDBjFiO3l3LY0,162
|
|
163
163
|
contentctl/templates/stories/cobalt_strike.yml,sha256=rlaXxMN-5k8LnKBLPafBoksyMtlmsPMHPJOjTiMiZ-M,3063
|
|
164
|
-
contentctl-4.0.
|
|
165
|
-
contentctl-4.0.
|
|
166
|
-
contentctl-4.0.
|
|
167
|
-
contentctl-4.0.
|
|
168
|
-
contentctl-4.0.
|
|
164
|
+
contentctl-4.0.3.dist-info/LICENSE.md,sha256=hQWUayRk-pAiOZbZnuy8djmoZkjKBx8MrCFpW-JiOgo,11344
|
|
165
|
+
contentctl-4.0.3.dist-info/METADATA,sha256=3qsVxL1TCBlcuUc4W_8TXSwrHBJku7XbEU1Ef_jWhfM,19751
|
|
166
|
+
contentctl-4.0.3.dist-info/WHEEL,sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg,88
|
|
167
|
+
contentctl-4.0.3.dist-info/entry_points.txt,sha256=5bjZ2NkbQfSwK47uOnA77yCtjgXhvgxnmCQiynRF_-U,57
|
|
168
|
+
contentctl-4.0.3.dist-info/RECORD,,
|
|
File without changes
|
|
File without changes
|
|
File without changes
|