Yamato-Security/hayabusa-rules

[bug] `null` keywords do not get converted properly

Closed this issue 10 months ago · 0 comments

fukusuket commented 10 months ago

null keywords do not get converted properly... :(

Rules before conversion:
https://github.com/SigmaHQ/sigma/blob/49adcf9a00247ed6c3daacba03b589470f6716d0/rules/windows/builtin/firewall_as/win_firewall_as_delete_rule.yml#L31

Rules after conversion:

hayabusa-rules/sigma/builtin/firewall_as/win_firewall_as_delete_rule.yml

Line 33 in 02a3199

ModifyingApplication:

I previously fixed the null bug with the PR below, but it seems like there was a regression at some point.

#243