rules

Documentation

Index

• func ListRulesFiles() []string
• func RulesChanges(signals chan os.Signal)
• func Update(updateReady chan bool)
• type AllOf
• type Cache
• type OneOf
• type Rule
  • func GetRules() []Rule
• type SavedField
• type Search

Functions

func ListRulesFiles

func ListRulesFiles() []string

func RulesChanges

func RulesChanges(signals chan os.Signal)

func Update

func Update(updateReady chan bool)

Types

type AllOf

type AllOf struct {
	Field    string `yaml:"field"`
	Operator string `yaml:"operator"`
	Value    string `yaml:"value"`
}

type Cache

type Cache struct {
	AllOf     []AllOf      `yaml:"allOf"`
	OneOf     []OneOf      `yaml:"oneOf"`
	TimeLapse int64        `yaml:"timeLapse"`
	MinCount  int          `yaml:"minCount"`
	Save      []SavedField `yaml:"save"`
}

type OneOf

type OneOf struct {
	Field    string `yaml:"field"`
	Operator string `yaml:"operator"`
	Value    string `yaml:"value"`
}

type Rule

type Rule struct {
	Name        string   `yaml:"name"`
	Severity    string   `yaml:"severity"`
	Description string   `yaml:"description"`
	Solution    string   `yaml:"solution"`
	Category    string   `yaml:"category"`
	Tactic      string   `yaml:"tactic"`
	DataTypes   []string `yaml:"dataTypes"`
	Reference   []string `yaml:"reference"`
	Frequency   int64    `yaml:"frequency"`
	Cache       []Cache  `yaml:"cache"`
	Search      []Search `yaml:"search"`
}

func GetRules

func GetRules() []Rule

type SavedField

type SavedField struct {
	Field string `yaml:"field"`
	Alias string `yaml:"alias"`
}

type Search

type Search struct {
	Query    string       `yaml:"query"`
	MinCount int          `yaml:"minCount"`
	Save     []SavedField `yaml:"save"`
}