This PR brings in some changes to the way Sigma is handled in Timesketch.
Make sanitization optional
New version of the Yeti analyzer: YetiLOLBASIndicators. This takes in Tools that are tagged lolbas in Yeti, traverses the graph looking for Sigma queries, and runs them on a sketch, tagging relevant events.
This PR brings in some changes to the way Sigma is handled in Timesketch.
Make sanitization optional
New version of the Yeti analyzer:
YetiLOLBASIndicators. This takes in Tools that are taggedlolbasin Yeti, traverses the graph looking for Sigma queries, and runs them on a sketch, tagging relevant events.