Skip to content

Commit 1cab4e4

Browse files
committed
feat(signature-type): add missing microsoft-defender signature types (#335)
1 parent 6e0f9a1 commit 1cab4e4

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

pyoaev/signatures/types.py

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,11 +46,16 @@ class MatchTypes(str, Enum):
4646

4747

4848
class SignatureTypes(str, Enum):
49+
SIG_TYPE_PROCESS_NAME = "process_name"
4950
SIG_TYPE_PARENT_PROCESS_NAME = "parent_process_name"
51+
SIG_TYPE_COMMAND_LINE = "command_line"
52+
SIG_TYPE_IPV4_ADDRESS = "ipv4_address"
53+
SIG_TYPE_IPV6_ADDRESS = "ipv6_address"
5054
SIG_TYPE_SOURCE_IPV4_ADDRESS = "source_ipv4_address"
5155
SIG_TYPE_SOURCE_IPV6_ADDRESS = "source_ipv6_address"
5256
SIG_TYPE_TARGET_IPV4_ADDRESS = "target_ipv4_address"
5357
SIG_TYPE_TARGET_IPV6_ADDRESS = "target_ipv6_address"
58+
SIG_TYPE_HOSTNAME = "hostname"
5459
SIG_TYPE_TARGET_HOSTNAME_ADDRESS = "target_hostname_address"
5560
SIG_TYPE_START_DATE = "start_date"
5661
SIG_TYPE_END_DATE = "end_date"
@@ -60,6 +65,7 @@ class SignatureTypes(str, Enum):
6065
SIG_TYPE_TARGET_SERVICE = "target_service"
6166
SIG_TYPE_QUERY = "query"
6267
SIG_TYPE_URL_HASH = "url_hash"
68+
SIG_TYPE_FILE_NAME = "file_name"
6369
SIG_TYPE_FILE_HASH = "file_hash"
6470
SIG_TYPE_SOURCE_EMAIL = "source_email"
6571
SIG_TYPE_TARGET_EMAIL = "target_email"

0 commit comments

Comments
 (0)