Skip to content

Commit 9e9495f

Browse files
authored
Bump to v3 API (#59)
Use the latest version of the Nightfall APIs, which involves breaking changes to the detection rule schema.
1 parent c9eaa20 commit 9e9495f

File tree

19 files changed

+756
-1042
lines changed

19 files changed

+756
-1042
lines changed

.nightfalldlp/config.json

Lines changed: 35 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -1,40 +1,38 @@
11
{
2-
"conditions": [
2+
"detectionRules": [
33
{
4-
"detector": {
5-
"detectorType": "NIGHTFALL_DETECTOR",
6-
"nightfallDetector": "CREDIT_CARD_NUMBER",
7-
"displayName": "cc num"
8-
},
9-
"minNumFindings": 1,
10-
"minConfidence": "VERY_UNLIKELY"
11-
},
12-
{
13-
"detector": {
14-
"detectorType": "NIGHTFALL_DETECTOR",
15-
"nightfallDetector": "PHONE_NUMBER",
16-
"displayName": "phone num"
17-
},
18-
"minNumFindings": 1,
19-
"minConfidence": "VERY_UNLIKELY"
20-
},
21-
{
22-
"detector": {
23-
"detectorType": "NIGHTFALL_DETECTOR",
24-
"nightfallDetector": "API_KEY",
25-
"displayName": "api key"
26-
},
27-
"minNumFindings": 1,
28-
"minConfidence": "VERY_UNLIKELY"
29-
},
30-
{
31-
"detector": {
32-
"detectorType": "NIGHTFALL_DETECTOR",
33-
"nightfallDetector": "CRYPTOGRAPHIC_KEY",
34-
"displayName": "crypto key"
35-
},
36-
"minNumFindings": 1,
37-
"minConfidence": "VERY_UNLIKELY"
4+
"name": "nightfall_code_scanner detection rule",
5+
"detectors": [
6+
{
7+
"minNumFindings": 1,
8+
"minConfidence": "VERY_UNLIKELY",
9+
"displayName": "cc num",
10+
"detectorType": "NIGHTFALL_DETECTOR",
11+
"nightfallDetector": "CREDIT_CARD_NUMBER"
12+
},
13+
{
14+
"minNumFindings": 1,
15+
"minConfidence": "VERY_UNLIKELY",
16+
"displayName": "phone num",
17+
"detectorType": "NIGHTFALL_DETECTOR",
18+
"nightfallDetector": "PHONE_NUMBER"
19+
},
20+
{
21+
"minNumFindings": 1,
22+
"minConfidence": "VERY_UNLIKELY",
23+
"displayName": "api key",
24+
"detectorType": "NIGHTFALL_DETECTOR",
25+
"nightfallDetector": "API_KEY"
26+
},
27+
{
28+
"minNumFindings": 1,
29+
"minConfidence": "VERY_UNLIKELY",
30+
"displayName": "crypto key",
31+
"detectorType": "NIGHTFALL_DETECTOR",
32+
"nightfallDetector": "CRYPTOGRAPHIC_KEY"
33+
}
34+
],
35+
"logicalOp": "ANY"
3836
}
3937
],
4038
"maxNumberConcurrentRoutines": 5,
@@ -45,5 +43,6 @@
4543
"1-240-925-5721",
4644
"xG0Ct4Wsu3OTcJnE1dFLAQfRgL6b8tIv"
4745
],
48-
"fileInclusionList": ["*"]
46+
"fileInclusionList": ["*"],
47+
"fileExclusionList": ["README.md"]
4948
}

0 commit comments

Comments
 (0)