All notable changes to the "sigma" extension will be documented in this file.
- Sigconverter URL -> Added version config
- Completion for category and product items (Thanks to @s1lvn PR #27)
- Align tag whitespace behaiviour with v2 spec ( Thanks to @frack113 Fixes #28)
- Apply Diagnostics only in sigma files
- Support for diagnostics with correlation rules
- Correlation Snippets
- Automatically update sigconverter on pipeline file change (Fix for #23)
- Fixed some error handling in diagnostics
- Implemented MITRE D3fend (Thanks @n36l3c7 #21)
- Attack Tag Command -> Tag Command (Thanks @n36l3c7 #21)
- Update the generateTodaySnippet function to use - instead of / (Thanks @nasbench for the rest #24)
- Update the related type from obsoletes to obsolete
- Update the tagsPattern for the following:
- The cve will use - instead of /
- Added all current possible values for TLP namespace
- Added all current possible values for detection namespace
- Fixed dev dependency - webpack
- Fixed some typos in logging
- Added sigconverter config to enable/disable the feature
- Added a warning to the user that sigconverter uses the online service
- Fixed the theming of the sigconverter so that some VSCode colors are used. This should make it look better on light theme
- Actually use the configured URL of configs
- Configuration example js -> ts
- Configs for sigconverter
- Allows multiple configs aswell as custom pipelines.
- Copy Button in sigconverter
- Share Button in sigconverter
- Added "tlp" in allowed tags
- Errors from sigconverter will be shown properly
- Sigconverter.io codelens
- Some more Snippets (Thanks to @nasbench #16)
- Snippet having to many whitespaces (Thanks to @ThureinOo #14)
- Readme update
- Results were not properly sorted
- Sigma Search Engine Integration (Thanks to @ph-T #8)
- Updated Attack Map
- Duplicate diagnostics now checks case insensitive
- Changed how the sigmac config works (Thanks to @ZikyHD #6)
- Added more diagnostics
- YAML parser: Errors will be shown in the editor as diagnostics
- Started implementing the Tests from the official sigma repo
- Fixed cursor positioning in the auto list completion
- Compile Rule Codelens
- Install sigmac (pip install sigmatools)
- Configure your sigmac compile configs in settings: sigma.compileConfig
- Click on the codelens in the first line (Compile: kibana)
- Compiled sigma rule will be in your clipboard
- Small bugfixes
Readme Cleanup
- Automatic List Continuation
- 'all' modifier with only one entry - diagnostic
- Cleaner adding of Attack Tags
- Added Tabstop in "Detection"-snippet
- Attack Tag Hover
- Attack Tag Command - Add Attack Tag (sigma.AddTag)
- Attack Tag Codelens
Version 1.0.0!
- Webextension Support (Quite untested)
- Kind of Fixed the Language Problem. Could still be better, See: microsoft/vscode#145659
- New Icon.
- Provide Diagnostics only for sigma files.
- Some fixes for diagnostics.
- First Diagnostics!
- Fixed some Snippets
Initial commit
Snippets!