valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-08 10:13:57 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #469 from stevengoossensB/master

Browse Source 
Added the cleanValue function for Qradar
This commit is contained in:
Thomas Patzke 2019-10-16 11:24:57 +02:00 committed by GitHub
commit 8c8ac52b57
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tools/sigma/backends/qradar.py
View File

@ -52,6 +52,10 @@ class QRadarBackend(SingleTextQueryBackend):
else:
return key
def cleanValue(self, value):
"""Remove quotes in text"""
return value.replace("\'","\\\'")
def generateNode(self, node):
if type(node) == sigma.parser.condition.ConditionAND:
return self.generateANDNode(node)