Skip to content

Date fix + Fix Acronis Cyber Protect Connect + Upgrade PDQ Connect Network Sigma + GitHub Actions on README.md #47

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 12 commits into
base: main
Choose a base branch
from

Conversation

wikijm
Copy link
Contributor

@wikijm wikijm commented Nov 14, 2024

No description provided.

magicsword-io#32

According to the Sigma Rules Specification, the date format in Sigma rule files must follow the ISO 8601 standard, using the separator format (YYYY-MM-DD instead of YYYY/MM/DD).
@wikijm
Copy link
Contributor Author

wikijm commented Nov 14, 2024

Date fix goal is explained here: #32

According to the Sigma Rules Specification, the date format in Sigma rule files must follow the ISO 8601 standard, using the separator format (YYYY-MM-DD instead of YYYY/MM/DD).

@wikijm wikijm changed the title Date fix + Fix Acronis Cyber Protect Connect + Upgrade PDQ Connect Network Sigma Date fix + Fix Acronis Cyber Protect Connect + Upgrade PDQ Connect Network Sigma + GitHub Actions on README.md Nov 14, 2024
@josehelps
Copy link
Collaborator

hey @wikijm overall the PR looks great since we want to enforce the date for sigma we probably want to enforce it on our validation python script and job: https://github.com/magicsword-io/LOLRMM/blob/main/.github/workflows/validate.yml#L26

what do you think about this?

@wikijm
Copy link
Contributor Author

wikijm commented Mar 5, 2025

Hi @josehelps

Excellent idea!
How can I help?

@wikijm
Copy link
Contributor Author

wikijm commented Apr 19, 2025

Hi @josehelps

Is my help still required?

@josehelps
Copy link
Collaborator

@wikijm I haven't had a shot to dig into it but if you want to add this as a validation check on this PR to https://github.com/magicsword-io/LOLRMM/blob/main/bin/validate.py that would be amazing, this way we can just run validate make sure all yamls follow this structure for date.

@josehelps josehelps self-assigned this Apr 23, 2025
@wikijm
Copy link
Contributor Author

wikijm commented May 2, 2025

Hi @josehelps

I created this pull request based on your suggestion: #70

wikijm added 3 commits May 2, 2025 12:23
This ensures that the script works for both 'LastModified:' and 'Created:' lines in the .yaml files.
Change yaml directory
@wikijm
Copy link
Contributor Author

wikijm commented May 2, 2025

I took the initiative to relocate the script I created, which addresses issues in the previous YAML files, to the bin folder.

wikijm added 5 commits May 3, 2025 11:34
If you want to avoid using a custom secret, you can utilize the built-in GITHUB_TOKEN, which is automatically provided by GitHub Actions and does not require manual setup.
Update actions/checkout version
Update actions/checkout
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants