v0.7.1

Bug fixes:

• Added name to key-value parameter type.
• Removed colliding -P shortcut from --without-pipeline.

v0.7.0

• BREAKING CHANGE: Removal of backend-specific options --min-time and --max-time.
• Addition of --backend-option/-O option for passing options to the backend as key=value pairs.

If --min-time or --max-time were used before this has to be migrated to --backend-option min_time=....

v0.6.1

• Restricting column width in tables.
• Installation and deinstallation of multiple plugins at once.
• Quiet plugin (un)installation with reduced pip output.

v0.6.0

What's Changed

Breaking Changes

• Added plugin system: backends and pipelines must now be installed with the new sigma plugin command group. Currently only some backends are available but will be migrated soon. If you rely on not yet migrated backends or pipelines, please keep using 0.5.x until this is done.

Other

• Fix: Error in Wrong Pipeline Checker by @sifex in #9
• Some minor formatting changes by @andurin in #12

New Contributors

• @sifex made their first contribution in #9
• @andurin made their first contribution in #13

Full Changelog: v0.5.3...v0.6.0

Sigma CLI 0.5.3

• Added field_name_prefix_mapping transformation.

Sigma CLI 0.5.2

• Fix: crash while validation of certain SigmaString values.

Sigma CLI 0.5.1

What's Changed

• Add name== "main" condition on the main cli file by @Res260 in #5
• Added rule validation by @thomaspatzke in #6

New Contributors

• @Res260 made their first contribution in #5
• @thomaspatzke made their first contribution in #6

Full Changelog: v0.5.0...v0.5.1

Sigma CLI 0.5.0

• Check if processing pipeline is required for target.
• Check if used pipelines are intended for usage with target.
• Input rules must be specified for conversion.
• Breaking change: pipelines in sigma.cli.pipelines is now a dict of pipeline definitions. Resolver moved to pipeline_resolver.

Sigma CLI 0.4.9

• Fixes from pySigma.
• Improved error handling.
• Display of collected errors after conversion result.

Sigma CLI 0.4.8

• Added initial Elasticsearch and OpenSearch support.
• Various fixes