elastic / detection-rules-dac-demo - Conditional Complexity

Intro

Conditional complexity (also called cyclomatic complexity) is a term used to measure the complexity of software. The term refers to the number of possible paths through a program function. A higher value ofter means higher maintenance and testing costs (infosecinstitute.com).
Conditional complexity is calculated by counting all conditions in the program that can affect the execution path (e.g. if statement, loops, switches, and/or operators, try and catch blocks...).
Conditional complexity is measured at the unit level (methods, functions...).
Units are classified in four categories based on the measured McCabe index: 1-5 (simple units), 6-10 (medium complex units), 11-25 (complex units), 26+ (very complex units).

Learn more...

Conditional Complexity Overall

There are 910 units with 8,772 lines of code in units (5.5% of code).

1 very complex units (86 lines of code)
9 complex units (834 lines of code)
48 medium complex units (1,541 lines of code)
113 simple units (1,945 lines of code)
739 very simple units (4,366 lines of code)

Legend:

51+

26-50

11-25

6-10

1-5

Alternative Visuals

3D view of all units

Conditional Complexity per Extension

51+

26-50

11-25

6-10

1-5

Conditional Complexity per Logical Component

primary logical decomposition

51+

26-50

11-25

6-10

1-5

Most Complex Units

Top 50 most complex units

Unit	# lines	McCabe index	# params
def toml_write() in detection_rules/rule_formatter.py	86	54	2
def kibana_export_rules() in detection_rules/kbwrap.py	157	48	10
def rule_prompt() in detection_rules/cli_utils.py	119	47	9
def schema_prompt() in detection_rules/misc.py	83	47	4
def import_rules_into_repo() in detection_rules/main.py	95	35	11
def validate_integration() in detection_rules/rule_validators.py	86	31	4
def add_client() in detection_rules/misc.py	52	31	3
def manage_versions() in detection_rules/version_lock.py	105	31	6
def parse_rules_config() in detection_rules/config.py	69	29	1
def trim_version_lock() in detection_rules/devtools.py	68	29	4
def generate_summary_and_changelog() in detection_rules/packaging.py	94	24	4
def update_attack_in_rules() in detection_rules/devtools.py	49	23	0
def validate() in detection_rules/rule_validators.py	40	22	4
def build_integrations_schemas() in detection_rules/integrations.py	45	22	2
def boolean() in lib/kql/kql/dsl.py	42	22	1
def validate() in detection_rules/rule_validators.py	27	21	4
def kibana_import_rules() in detection_rules/kbwrap.py	58	20	5
def search_rules() in detection_rules/main.py	49	20	8
def get_datasets_and_modules() in detection_rules/beats.py	20	19	2
def search_from_rule() in detection_rules/eswrap.py	63	19	5
def multi_collection() in detection_rules/cli_utils.py	39	18	1
def filter_rule() in detection_rules/packaging.py	22	17	3
def patch_jsonschema() in detection_rules/mixins.py	27	17	1
def validate_note() in detection_rules/rule.py	21	17	1
def convert_value() in lib/kql/kql/parser.py	27	17	4
def endpoint_by_attack() in detection_rules/devtools.py	43	16	5
def search() in hunting/search.py	23	16	2
def custom_in_set() in detection_rules/rule_validators.py	21	15	2
def generate_schema() in detection_rules/devtools.py	30	15	5
def validate_bbr() in detection_rules/rule.py	38	15	2
def _convert_add_related_integrations() in detection_rules/rule.py	29	15	2
def load_github_pr_rules() in detection_rules/rule_loader.py	44	14	5
def _walk_value() in lib/kql/kql/evaluator.py	23	14	3
def bump_versions() in detection_rules/devtools.py	34	13	5
def rule_survey() in detection_rules/devtools.py	41	13	8
def dump_list() in detection_rules/rule_formatter.py	15	13	2
def find_latest_compatible_version() in detection_rules/integrations.py	32	13	4
def create_dnstwist_index() in detection_rules/main.py	48	13	2
def parse_unique_field_results() in detection_rules/eswrap.py	20	13	3
def _filter_by_data_source() in hunting/search.py	27	13	2
def run_query() in hunting/__main__.py	38	13	4
def get_eql_schema() in detection_rules/ecs.py	22	12	2
def prune_staging_area() in detection_rules/devtools.py	27	12	3
def load_rule_contents() in detection_rules/utils.py	22	12	2
def get_required_fields() in detection_rules/rule.py	36	12	2
def get_kibana_client() in detection_rules/misc.py	27	12	11
def build_integrations_manifest() in detection_rules/integrations.py	29	12	4
def search_alerts() in detection_rules/kbwrap.py	28	12	6
def _flatten_schema() in detection_rules/beats.py	23	12	2
def hunt_summary() in hunting/__main__.py	22	12	1