Transform Sigma LOLRMM WikiJM to S1PQ #89
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Transform Sigma LOLRMM WikiJM to S1PQ | |
on: | |
workflow_dispatch: | |
schedule: | |
- cron: "0 0 * * *" # Run once per day at midnight | |
jobs: | |
run-python-script: | |
runs-on: ubuntu-latest # Change value from 'self-hosted' to 'ubuntu-latest' if you want to host it on Github. | |
permissions: | |
contents: write | |
steps: | |
- name: Checkout code | |
uses: actions/[email protected] | |
- name: Set up Python | |
uses: actions/[email protected] | |
with: | |
python-version: '3.10' | |
- name: get sigma-cli # other parts of my CI/CD workflow use the sigma-cli - I've left it in, but you should be ok to remove this section and the plugin install steps too. | |
run: | | |
python -m pip install sigma-cli | |
- name: Install sigma-cli pipelines | |
run: | | |
sigma plugin install sentinelone-pq | |
- name: Get Sigma repository | |
run: | | |
git clone https://github.com/wikijm/LOLRMM.git | |
- name: Create destination folder 'S1PQ - LOLRMM WikiJM' | |
run: | | |
mkdir -p "${{ github.workspace }}/S1PQ - LOLRMM WikiJM" | |
- name: Run 'Sigma to S1PQ - Windows process event creation script' | |
run: python lolrmm-to-s1pq-converter-create_markdown.py | |
- name: Commit and push translated process creation rules | |
uses: stefanzweifel/git-auto-commit-action@v5 |