Skip to content

Commit

Permalink
Moved correlation method dict to backend base class
Browse files Browse the repository at this point in the history
  • Loading branch information
thomaspatzke committed Jan 18, 2024
1 parent 282cf25 commit 67550ef
Showing 1 changed file with 6 additions and 6 deletions.
12 changes: 6 additions & 6 deletions sigma/conversion/base.py
Original file line number Diff line number Diff line change
Expand Up @@ -114,6 +114,12 @@ class Backend(ABC):
bool
] = False # Does the backend requires that a processing pipeline is provided?

# Backends can offer different methods of correlation query generation. That are described by
# correlation_methods:
correlation_methods: ClassVar[Optional[Dict[str, str]]] = None
# The following class variable defines the default method that should be chosen if none is provided.
default_correlation_method: ClassVar[str] = "default"

processing_pipeline: ProcessingPipeline
last_processing_pipeline: ProcessingPipeline
backend_processing_pipeline: ClassVar[ProcessingPipeline] = ProcessingPipeline()
Expand Down Expand Up @@ -848,12 +854,6 @@ class variables. If this is not sufficient, the respective methods can be implem
] = None # String used as query if final query only contains deferred expression

### Correlation rule templates
# Backends can offer different methods of correlation query generation. That are described by
# correlation_methods:
correlation_methods: ClassVar[Optional[Dict[str, str]]] = None
# The following class variable defines the default method that should be chosen if none is provided.
default_correlation_method: ClassVar[str] = "default"

## Correlation query frame
# The correlation query frame is the basic structure of a correlation query for each correlation
# type. It contains the following placeholders:
Expand Down

0 comments on commit 67550ef

Please sign in to comment.