matanolabs / matano

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
https://matano.dev
Apache License 2.0
1.42k stars 98 forks source link

fix: detection: dont error in alerting in case no event field #144

Closed Samrose-Ahmed closed 1 year ago

Samrose-Ahmed commented 1 year ago

Right now, error occurs in create_alert when there is no event ECS field, this fixes the logic to guard against.