diff --git a/tools/sigma/backends/qradar.py b/tools/sigma/backends/qradar.py index a682ed0f..f5a5d9c7 100644 --- a/tools/sigma/backends/qradar.py +++ b/tools/sigma/backends/qradar.py @@ -52,6 +52,10 @@ class QRadarBackend(SingleTextQueryBackend): else: return key + def cleanValue(self, value): + """Remove quotes in text""" + return value.replace("\'","\\\'") + def generateNode(self, node): if type(node) == sigma.parser.condition.ConditionAND: return self.generateANDNode(node)