Skip to content

Instantly share code, notes, and snippets.

@sifex
sifex / sifex-pySigma-backend-quickwit.json
Last active December 16, 2025 13:49
pysigma-backend-quickwit.json
{}
@sifex
sifex / KibanaElasticTransport.py
Created August 22, 2025 17:11
Kibana Proxy Transport for Elasticsearch for Python
import base64
from urllib.parse import urlparse, quote
from elastic_transport import Transport, NodeConfig, AsyncTransport
class KibanaProxyTransport(Transport):
"""Simple transport that tunnels Elasticsearch requests via Kibana Dev Tools proxy."""
def __init__(
{
"name": "Apple Telemetry Block",
"description": "Denies outbound connections to known Apple telemetry/analytics endpoints, plus Siri and location-services reporting. High priority so it overrides per-process allow rules. Dead domains removed.",
"rules": [
{
"action": "deny",
"process": "any",
"direction": "out",
"priority": "high",
"remote-domains": [