Aristotle
stable

Contents:

  • Application Overview
  • Background
  • Metadata Key-Value Pairs
  • Setup
  • Usage
    • Example Files
    • Example Usage
    • Statistics
    • Classtype
    • Filename
    • Disabled Rules
    • Normalize
    • Enhance
      • Detection Direction
    • Modify Metadata
    • Post Filter Modification
  • Boolean Filter Strings
    • Matching on the msg Field
    • Matching on the raw rule
    • Example Filter Strings
  • Post Filter Modification (“PFMod”)
    • Overview
    • PFMod YAML Format
      • PFMod Actions
    • Example PFMod YAML Files
  • Disabled/Commented Rules
    • Identification
    • Input
    • Output
  • Aristotle as a Module
  • License
  • Authors
Aristotle
  • Docs »
  • Search
  • Edit on GitHub

© Copyright 2019 Secureworks, Inc., 2023 Uber Technologies, Inc. Revision 70ad7fdc.

Built with Sphinx using a theme provided by Read the Docs.