INNER CODE UNIT · Python
extract_logtypes_from_sql
panther-labs/panther-analysis · .scripts/generate_indexes.py:151
def extract_logtypes_from_sql(sql, logtype_lookup):
logtypes = []
sql = sql.lower()
for db_name, log_type in logtype_lookup.items():
db_name = db_name.lower()
if db_name in sql and log_type not in logtypes:
logtypes.append(log_type)
return logtypes
def extract_log_types_from_yaml(yaml, query_lookup, logtype_lookup):
if 'LogTypes' in yaml:
return yaml['LogTypes']
if 'ScheduledQueries' in yaml:
for query in yaml['ScheduledQueries']:
if query in query_lookup:
query_yaml = query_lookup[query]
sql = ''