Remove config to use cache

[frack113]

Breack logic to use diskcache in v0.30.0

• Use diskcache create:
  • data_filename
  • data_taxonomy
  • data_windows_eventid
  • data_windows_provider
• Split sigmahq_windows_validator.json into
  • sigmahq_windows_eventid.json
  • sigmahq_windows_provider.json
• Update json schema
• rename field.py to fieldname.py
• Remove dead code
  • config.py
  • update_ref.py
  • test_config.py
  • sigmahq_data.py

[Copilot]

Pull request overview

This PR refactors the SigmaHQ validator to use diskcache for dynamic data loading instead of static generated Python files. The changes improve the architecture by:

• Implementing disk caching for remote JSON data from the SigmaHQ repository
• Splitting Windows validator data into separate eventid and provider JSON files
• Removing dead code including the config system and data generation scripts
• Updating validators to use the new data loading modules

Reviewed changes

Copilot reviewed 30 out of 31 changed files in this pull request and generated 10 comments.

Show a summary per file

File	Description
sigma/validators/sigmahq/data/data_taxonomy.py	New module for loading and caching taxonomy data with disk cache
sigma/validators/sigmahq/data/data_filename.py	New module for loading and caching filename pattern data
sigma/validators/sigmahq/data/data_windows_eventid.py	New module for Windows EventID validation data
sigma/validators/sigmahq/data/data_windows_provider.py	New module for Windows provider validation data
sigma/validators/sigmahq/fieldname.py	Updated to use new data_taxonomy module instead of config
sigma/validators/sigmahq/logsource.py	Updated to use new data_taxonomy module
sigma/validators/sigmahq/filename.py	Updated to use new data_filename module
sigma/validators/sigmahq/detection.py	Updated to use new Windows data modules
sigma/validators/sigmahq/modifier.py	New module containing field duplicate and all modifier validators
tools/sigmahq_windows_eventid.json	New JSON file separating EventID validation data
tools/sigmahq_windows_provider.json	Updated JSON file with only provider data
json-schema/schema_sigmahq_windows_eventid.json	New JSON schema for EventID validation
json-schema/schema_sigmahq_windows_provider.json	Updated schema removing eventid field
tests/*	Updated test imports from field to fieldname/modifier modules

[frack113]

Test will not pass as the json are not in the main branch by now 😞
Wait for a new repo to put them.