INNER CODE UNIT · Python

generate_sigma_domains_rule

magicsword-io/LOLRMM · bin/generate_detections.py:135

def generate_sigma_domains_rule():
    """Generate a Sigma rule for detecting DNS queries to RMM domains"""

    # Get a list of RMM domains from the domains.csv file
    api_dir = os.path.join(
        os.path.dirname(os.path.dirname(os.path.abspath(__file__))),
        "website",
        "public",
        "api",
    )
    domains_file = os.path.join(api_dir, "rmm_domains.csv")

    domain_list = []
    try:
        import csv

        with open(domains_file, "r", encoding="utf-8") as file:
            csv_reader = csv.reader(file)

View source record →