search

certeu / droid

A pySigma wrapper to manage detection rules.
https://certeu.github.io/droid-docs/
European Union Public License 1.2
29 stars 3 forks source link

fix: entity mapping issues for Sigma #28

Closed 0xFustang closed 4 days ago

0xFustang commented 4 days ago

Description

Fixing an issue when deploying a scheduled search on Microsoft Sentinel. When the entity mappings list is empty it produced the following error:

[: Invalid length of '0' for 'EntityMappings'. 'EntityMappings' length should be between '1' and '10']

It's now fixed by passing entity_mappings to None.