gis-9379 fixes

nazargesyk · nazargesyk · commit 1426c79ad63e · 2025-01-20T13:25:37.000+02:00
diff --git a/uncoder-core/app/translator/platforms/sigma/const.py b/uncoder-core/app/translator/platforms/sigma/const.py
@@ -9,14 +9,14 @@
 }
 
 DEFAULT_SIGMA_CTI_MAPPING = {
-    "SourceIP": "SourceIP",
-    "DestinationIP": "DestinationIP",
-    "Domain": "Domain",
-    "URL": "URL",
-    "HashMd5": "HashMd5",
-    "HashSha1": "HashSha1",
-    "HashSha256": "HashSha256",
-    "HashSha512": "HashSha512",
+    "SourceIP": "src-ip",
+    "DestinationIP": "dst-ip",
+    "Domain": "cs-host",
+    "URL": "c-uri",
+    "HashMd5": "Hashes",
+    "HashSha1": "Hashes",
+    "HashSha256": "Hashes",
+    "HashSha512": "Hashes",
 }
 
 
diff --git a/uncoder-core/app/translator/platforms/sigma/renders/sigma_cti.py b/uncoder-core/app/translator/platforms/sigma/renders/sigma_cti.py
@@ -53,7 +53,7 @@ def generate(self, data: dict[list[list[IocsChunkValue]]], **kwargs):
                     "id": uuid.uuid4().__str__(),
                     "description": kwargs["description"],
                     "status": "stable",
-                    "author": "SOC Prime Team",
+                    "author": "Uncoder Autogenerated",
                     "logsource": LOGSOURCE_MAP.get(key),
                     "fields": list(data_values.keys()),
                     "detection": {"selection": data_values, "condition": "selection"},
diff --git a/uncoder-core/app/translator/tools/const.py b/uncoder-core/app/translator/tools/const.py
@@ -8,7 +8,7 @@
 HashType = Literal["md5", "sha1", "sha256", "sha512"]
 IocParsingRule = Literal["replace_dots", "remove_private_and_reserved_ips", "replace_hxxp"]
 
-DefaultIOCType = list(get_args(IOCType))
+DefaultIOCType = list(get_args(Literal["ip", "url", "hash"]))
 DefaultHashType = list(get_args(HashType))
 DefaultIocParsingRule = list(get_args(IocParsingRule))
 
