CreateSigmaRuleIndicator

Details

ID	`CreateSigmaRuleIndicator`
Language	python
From Version	6.10.0
Docker Image	`demisto/pysigma:1.0.0.10133006`

README

Script Data

Name	Description
Script Type	python3

Inputs

Argument Name	Description
sigma_rule_str	A string containing the Sigma rule in its original format.
entry_id	The entry ID of the file that contains the Sigma rule. The script will read the Sigma rule from this file if provided.

Outputs

There are no outputs for this script.

Source

CreateSigmaRuleIndicator.py CreateSigmaRuleIndicator_test.py CreateSigmaRuleIndicator.yml

Download History Raw

commonfields:
  id: CreateSigmaRuleIndicator
  version: -1
name: CreateSigmaRuleIndicator
script: ''
type: python
tags: []
enabled: true
args:
- name: sigma_rule_str
  description: A string containing the Sigma rule in its original format.
- name: entry_id
  description: The entry ID of the file that contains the Sigma rules (either a rule file or a zip file with multiple rules).
- name: create_indicators
  default: true
  auto: PREDEFINED
  predefined:
  - "true"
  - "false"
  defaultValue: "true"
  description: If true, creates the indicators,. If false, returns a JSON of indicators. (Default is true).
scripttarget: 0
subtype: python3
runonce: false
runas: DBotWeakRole
engineinfo: {}
fromversion: 6.10.0
dockerimage: demisto/pysigma:1.0.0.10133006
timeout: 1200
tests:
- No tests (auto formatted)