You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Many of the count rules are now placed in an rules-unsupported folder in the sigma repository and not used anymore. However, there are no correlation rules at the moment to replace them. This option will be very similar to the --enable-deprecated-rules but instead of enabling rules with status: deprecated it will enable rules with status: unsupported.
In the current version, unsupported rules will show up when launched Haybabusa but will enable them by default. I want to disable them by default like deprecated rules and show like this:
Many of the count rules are now placed in an
rules-unsupported
folder in the sigma repository and not used anymore. However, there are no correlation rules at the moment to replace them. This option will be very similar to the--enable-deprecated-rules
but instead of enabling rules withstatus: deprecated
it will enable rules withstatus: unsupported
.In the current version, unsupported rules will show up when launched Haybabusa but will enable them by default. I want to disable them by default like deprecated rules and show like this:
csv-timeline
,json-timeline
andpivot-keywords
should be supported.Note: After creating this option, we will have to start converting deprecated and unsupported rules in the hayabusa-rules repository.
The text was updated successfully, but these errors were encountered: