Skip to content

Commit

Permalink
Release 0.20
Browse files Browse the repository at this point in the history
  • Loading branch information
thomaspatzke committed Aug 13, 2021
1 parent 5b72cdb commit 5c4fd3a
Show file tree
Hide file tree
Showing 2 changed files with 40 additions and 5 deletions.
36 changes: 36 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,42 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
from version 0.14.0.

## 0.20 - 2021-08-14

### Added

* Devo backend
* Fields selection added to SQL backend
* Linux/MacOS support for MDATP backend
* Output results as generic YAML/JSON
* Hash normalization option (hash_normalize) for Elasticsearch wildcard handling
* ALA AWS Cloudtrail and Azure mappings
* Logrhytm backend
* Splunk Data Models backend
* Further log sources used in open source Sigma ruleset
* CarbonBlack EDR backend
* Elastic EQL backend
* Additional conversion selection filters
* Filter negation
* Specifiy table in SQL backend
* Generic registry event log source
* Chronicle backend

### Changed

* Elastic Watcher backend populates name attribute instead of title.
* One item list optimization.
* Updated Winlogbeat mapping
* Generic mapping for Powershell backend

### Fixed

* Elastalert multi output file
* Fixed duplicate output in ElastAlert backend
* Escaping in Graylog backend
* es-rule ndjson output
* Various fixes of known bugs

## 0.19.1 - 2021-02-28

### Changed
Expand Down
9 changes: 4 additions & 5 deletions tools/setup.py
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@

setup(
name='sigmatools',
version='0.19.1',
version='0.20',
description='Tools for the Generic Signature Format for SIEM Systems',
long_description=long_description,
long_description_content_type="text/markdown",
Expand All @@ -30,9 +30,8 @@
'Topic :: Security',
'Topic :: Internet :: Log Analysis',
'License :: OSI Approved :: GNU Lesser General Public License v3 (LGPLv3)',
'Programming Language :: Python :: 3.6',
'Programming Language :: Python :: 3.7',
'Programming Language :: Python :: 3.8',
'Programming Language :: Python :: 3.9',
'Environment :: Console',
],
keywords='security monitoring siem logging signatures elasticsearch splunk ids sysmon',
Expand All @@ -43,8 +42,8 @@
'sigma.parser',
'sigma.parser.modifiers',
],
python_requires='~=3.6',
install_requires=['PyYAML', 'pymisp', 'progressbar2'],
python_requires='~=3.8',
install_requires=['PyYAML', 'pymisp', 'progressbar2', 'ruamel.yaml'],
extras_require={
'test': ['coverage', 'yamllint'],
},
Expand Down

0 comments on commit 5c4fd3a

Please sign in to comment.