chronicle / detection-rules

Collection of YARA-L 2.0 sample rules for the Chronicle Detection API
https://chronicle.security
Apache License 2.0
290 stars 69 forks source link

fix: Add missing quotation mark to gcp_firewall_rule_changes.yaral #9

Closed jacks-reid closed 2 years ago

jacks-reid commented 2 years ago

gcp_cloudaudit/gcp_firewall_rule_changes.yaral has a missing quotation mark that will result in a compilation error like the following when pasted into the rules editor:

COMPILATION ERROR: tokenizing: unable to tokenize: literal not terminated

This PR adds the missing quotation mark.