v0.9.2

Added test pipelines and extended test backend.

v0.9.1

Updated plugin directory to stable version 1.

v0.9.0

What's Changed

Breaking Changes

• Added plugin system for backends, pipelines and validators. Requires additional metadata from plugin to enable plugin system to discover it.
• Moved builtin validators to package sigma.validators.core.
• Reintroduced Windows logsource mapping change that introduces lists to windows_logsource_mapping for Sigma log sources that map to multiple Windows log sources. Use generate_windows_logsource_items() function from sigma.pipelines.common to generate processing pipelines from windows_logsource_mapping. It handles multivalue cases correctly.

Further Changes

• Added support for value lists in AddConditionTransformation processing pipeline operation.
• Update mitre attack by @andurin in #96
• docs: clarification on cidr value modifier IPv4 limitation by @phantinuss in #100

New Contributors

• @phantinuss made their first contribution in #100

Full Changelog: v0.8.12...v0.9.0

pySigma 0.8.12

Added option to keep regular expression escpae character itself unescaped in regular expression escpae() method as well as in the text query base class.

pySigma 0.8.11

Fix: reverted change that introduced breaking change, lists in windows_logsource_mapping.

pySigma 0.8.10

What's Changed

• Update Win Logsource Mapping + Missing Categories by @nasbench in #67
• Ensure DeferredQueryExpressions avoid grouping by @kelnage in #70
• Add new event-log source by @nasbench in #71
• Fixed poetry install error on Python 3.11(due to pylint dependency) by @fukusuket in #73
• Fixed poetry install error on Windows2019 by @fukusuket in #74
• keep space in int by @frack113 in #75
• Allow a single WILDCARD_MULTI by @frack113 in #76

New Contributors

• @nasbench made their first contribution in #67
• @kelnage made their first contribution in #70
• @fukusuket made their first contribution in #73

Full Changelog: v0.8.9...v0.8.10

pySigma 0.8.9

What's Changed

• Added FieldPrefixMappingTransformation.
• Fix a big here a ConditionItem with multiple items would not have a p… by @Res260 in #66

New Contributors

• @Res260 made their first contribution in #66

Full Changelog: v0.8.8...v0.8.9

pySigma 0.8.8

• Added custom Sigma rule attributes in custom_attributes.

pySigma 0.8.7

• SigmaString slice with start after end of string now results in empty SigmaString instead of exception. This matches the behavior of Pytho strings.

pySigma 0.8.6

• Fix: conversion of rule ids to UUIDs on load of validator configuration from YAML or dict.
• Fix: Added type tool to MITRE ATT&CK software tags.