valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 09:48:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Added the cleanValue function for Qradar

Browse Source
This commit is contained in:
Steven Goossens 2019-10-16 10:27:24 +02:00
parent 38c19db1c5
commit 2837d3ba74
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tools/sigma/backends/qradar.py
View File

@ -52,6 +52,10 @@ class QRadarBackend(SingleTextQueryBackend):
else:
return key
def cleanValue(self, value):
"""Remove quotes in text"""
return value.replace("\'","\\\'")
def generateNode(self, node):
if type(node) == sigma.parser.condition.ConditionAND:
return self.generateANDNode(node)