valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 09:48:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

cleaner default value handling

Browse Source
This commit is contained in:
Theo Guidoux 2021-08-16 10:47:05 +02:00
parent 40018eef7f
commit 16269c0d63
No known key found for this signature in database
GPG Key ID: AC97B26A222D0536
1 changed files with 2 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
tools/sigma/backends/sql.py
View File

@ -48,7 +48,6 @@ class SQLBackend(SingleTextQueryBackend):
("table", "eventlog", "Use this option to specify table name.", None),
("select", "*", "Use this option to specify fields you want to select. Example: \"--backend-option select=xxx,yyy\"", None),
)
def __init__(self, sigmaconfig, options):
@ -62,7 +61,7 @@ class SQLBackend(SingleTextQueryBackend):
if "select" in options and options["select"]:
self.select_fields = options["select"].split(',')
else:
self.select_fields = list()
self.select_fields = list("*")
def generateANDNode(self, node):
generated = [ self.generateNode(val) for val in node ]
@ -197,10 +196,7 @@ class SQLBackend(SingleTextQueryBackend):
if self._recursiveFtsSearch(parsed.parsedSearch):
raise NotImplementedError("FullTextSearch not implemented for SQL Backend.")
result = self.generateNode(parsed.parsedSearch)
select = "*"
if self.select_fields:
select = ", ".join(self.select_fields)
select = ", ".join(self.select_fields)
if parsed.parsedAgg:
#Handle aggregation