Azure / Azure-Sentinel-Notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.
MIT License
551 stars 190 forks source link

SigmaRuleImporter error when saving KQL queries #192

Open apdelchi opened 1 year ago

apdelchi commented 1 year ago

When trying to export the KQL queries, the cell runs for a bit without a problem, and successfully outputs some of the KQL queries then it runs into this issue:


TypeError                                 Traceback (most recent call last)
Cell In[22], line 7
      4 sub_dir = root.joinpath(categ)
      6 for file_name, contents in kql_files.items():
----> 7     kql_txt = contents[1]
      8     if not kql_txt == NOT_CONVERTIBLE:
      9         sub_dir.mkdir(exist_ok=True)

TypeError: 'WindowsPath' object is not subscriptable