elastic / detection-rules - Conditional Complexity

Intro

Conditional complexity (also called cyclomatic complexity) is a term used to measure the complexity of software. The term refers to the number of possible paths through a program function. A higher value ofter means higher maintenance and testing costs (infosecinstitute.com).
Conditional complexity is calculated by counting all conditions in the program that can affect the execution path (e.g. if statement, loops, switches, and/or operators, try and catch blocks...).
Conditional complexity is measured at the unit level (methods, functions...).
Units are classified in four categories based on the measured McCabe index: 1-5 (simple units), 6-10 (medium complex units), 11-25 (complex units), 26+ (very complex units).

Learn more...

Conditional Complexity Overall

There are 914 units with 8,754 lines of code in units (5.2% of code).

2 very complex units (256 lines of code)
8 complex units (679 lines of code)
47 medium complex units (1,536 lines of code)
112 simple units (1,897 lines of code)
745 very simple units (4,386 lines of code)

Legend:

51+

26-50

11-25

6-10

1-5

Alternative Visuals

3D view of all units

Conditional Complexity per Extension

51+

26-50

11-25

6-10

1-5

Conditional Complexity per Logical Component

primary logical decomposition

51+

26-50

11-25

6-10

1-5

Most Complex Units

Top 50 most complex units

Unit	# lines	McCabe index	# params
def kibana_export_rules() in detection_rules/kbwrap.py	170	58	14
def toml_write() in detection_rules/rule_formatter.py	86	54	2
def rule_prompt() in detection_rules/cli_utils.py	114	50	9
def schema_prompt() in detection_rules/misc.py	83	47	4
def import_rules_into_repo() in detection_rules/main.py	101	35	13
def validate_integration() in detection_rules/rule_validators.py	86	31	4
def add_client() in detection_rules/misc.py	52	31	3
def manage_versions() in detection_rules/version_lock.py	105	31	6
def parse_rules_config() in detection_rules/config.py	70	29	1
def trim_version_lock() in detection_rules/devtools.py	68	29	4
def generate_summary_and_changelog() in detection_rules/packaging.py	94	24	4
def kibana_import_rules() in detection_rules/kbwrap.py	74	24	5
def update_attack_in_rules() in detection_rules/devtools.py	49	23	0
def multi_collection() in detection_rules/cli_utils.py	45	22	1
def validate() in detection_rules/rule_validators.py	40	22	4
def build_integrations_schemas() in detection_rules/integrations.py	45	22	2
def boolean() in lib/kql/kql/dsl.py	42	22	1
def validate() in detection_rules/rule_validators.py	27	21	4
def search_rules() in detection_rules/main.py	49	20	8
def get_datasets_and_modules() in detection_rules/beats.py	20	19	2
def search_from_rule() in detection_rules/eswrap.py	63	19	5
def filter_rule() in detection_rules/packaging.py	22	17	3
def patch_jsonschema() in detection_rules/mixins.py	27	17	1
def validate_note() in detection_rules/rule.py	21	17	1
def convert_value() in lib/kql/kql/parser.py	27	17	4
def endpoint_by_attack() in detection_rules/devtools.py	43	16	5
def search() in hunting/search.py	23	16	2
def custom_in_set() in detection_rules/rule_validators.py	21	15	2
def generate_schema() in detection_rules/devtools.py	30	15	5
def validate_bbr() in detection_rules/rule.py	38	15	2
def _convert_add_related_integrations() in detection_rules/rule.py	29	15	2
def load_github_pr_rules() in detection_rules/rule_loader.py	44	14	5
def _walk_value() in lib/kql/kql/evaluator.py	23	14	3
def bump_versions() in detection_rules/devtools.py	34	13	5
def rule_survey() in detection_rules/devtools.py	41	13	8
def dump_list() in detection_rules/rule_formatter.py	15	13	2
def find_latest_compatible_version() in detection_rules/integrations.py	32	13	4
def create_dnstwist_index() in detection_rules/main.py	48	13	2
def parse_unique_field_results() in detection_rules/eswrap.py	20	13	3
def _filter_by_data_source() in hunting/search.py	27	13	2
def run_query() in hunting/__main__.py	38	13	4
def get_eql_schema() in detection_rules/ecs.py	22	12	2
def prune_staging_area() in detection_rules/devtools.py	27	12	3
def load_rule_contents() in detection_rules/utils.py	22	12	2
def get_required_fields() in detection_rules/rule.py	36	12	2
def build_integrations_manifest() in detection_rules/integrations.py	29	12	4
def search_alerts() in detection_rules/kbwrap.py	28	12	6
def _flatten_schema() in detection_rules/beats.py	23	12	2
def hunt_summary() in hunting/__main__.py	22	12	1
def get_all_flattened_schema() in detection_rules/ecs.py	17	11	0