Skip to content

Commit e54b394

Browse files
authored
Merge pull request #2 from UncoderIO/saltar-ua-clean-functions
Clean Microsoft Sentinel functions
2 parents c0caa27 + 39e6cbd commit e54b394

File tree

6 files changed

+0
-171
lines changed

6 files changed

+0
-171
lines changed

siem-converter/app/converter/backends/microsoft/siem_functions/aggregation.py

Lines changed: 0 additions & 40 deletions
This file was deleted.

siem-converter/app/converter/backends/microsoft/siem_functions/base.py

Lines changed: 0 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -1,35 +1,9 @@
1-
from app.converter.backends.microsoft.siem_functions.aggregation import AlaAggregationFunctionRender
2-
from app.converter.backends.microsoft.siem_functions.search import AlaSearchFunctionRender
3-
from app.converter.backends.microsoft.siem_functions.sort import AlaSortFunctionRender
4-
from app.converter.backends.microsoft.siem_functions.table import AlaTableFunctionRender
51
from app.converter.core.functions import Functions
6-
from app.converter.core.models.functions.aggregation import AggregationExpression
7-
from app.converter.core.models.functions.search import SearchExpression
8-
from app.converter.core.models.functions.sort import SortExpression
9-
from app.converter.core.models.functions.table import TableExpression
102
from app.converter.core.models.functions.types import ParsedFunctions, NotSupportedFunction
113

124

135
class MicroSoftQueryFunctions(Functions):
146

15-
render_functions_map = {
16-
SortExpression: AlaSortFunctionRender,
17-
SearchExpression: AlaSearchFunctionRender,
18-
AggregationExpression: AlaAggregationFunctionRender,
19-
TableExpression: AlaTableFunctionRender,
20-
# WhereExpression: AlaWhereFunctionRender
21-
}
22-
23-
def render(self, functions: list):
24-
query = "| "
25-
funcs = []
26-
for function in functions:
27-
if render_class := self.render_functions_map.get(type(function)):
28-
funcs.append(render_class(function).render())
29-
query += " | ".join(funcs)
30-
query = query.rstrip(" ")
31-
return query
32-
337
def parse(self, query: str):
348
result = []
359
functions = query.split(self.function_delimiter)

siem-converter/app/converter/backends/microsoft/siem_functions/search.py

Lines changed: 0 additions & 56 deletions
This file was deleted.

siem-converter/app/converter/backends/microsoft/siem_functions/sort.py

Lines changed: 0 additions & 17 deletions
This file was deleted.

siem-converter/app/converter/backends/microsoft/siem_functions/table.py

Lines changed: 0 additions & 24 deletions
This file was deleted.

siem-converter/app/converter/backends/microsoft/siem_functions/where.py

Lines changed: 0 additions & 8 deletions
This file was deleted.

0 commit comments

Comments
 (0)