Closed Neo23x0 closed 1 week ago
the README states that the falsepositives field is a list of possible false positives, but the JSON schema allows for single string values
falsepositives
string
https://github.com/SigmaHQ/sigma-specification/blob/main/specification/sigma-rules-specification.md#falsepositives
the README states that the
falsepositivesfield is a list of possible false positives, but the JSON schema allows for singlestringvalueshttps://github.com/SigmaHQ/sigma-specification/blob/main/specification/sigma-rules-specification.md#falsepositives