muchdogesec / sigma2stix

A command line tool that converts Sigma Rules into STIX 2.1 Objects.
Apache License 2.0
4 stars 2 forks source link

Script exist on fatal error on latest version r2024-09-02 #3

Closed himynamesdave closed 1 month ago

himynamesdave commented 3 months ago
(sigma2stix-venv) dgreenwood@Davids-MBP-2 sigma2stix % python3 sigma2stix.py \
        --mode sigmahq \
        --sigma_version_tag r2024-09-02
r2024-09-02
[2024-09-02 - 20:49:20] {/Users/dgreenwood/Documents/repos/dogesec/sigma2stix/src/sigma2stix.py:29} INFO - Cloning start
Repository cloned successfully to data
[2024-09-02 - 20:49:28] {/Users/dgreenwood/Documents/repos/dogesec/sigma2stix/src/sigma2stix.py:31} INFO - Cloning end
Deleted: data/documentation
Deleted: data/images
Deleted: data/other
Deleted: data/tests
Deleted: data/unsupported
Deleted: data/.github
Deleted: data/.git
Deleted: data/deprecated
'data/rules/windows/create_stream_hash/create_stream_hash_ads_executable.yml', 'data/rules/windows/create_stream_hash/create_stream_hash_winget_susp_package_source.yml', 'data/rules/windows/create_stream_hash/create_stream_hash_regedit_export_to_ads.yml', 'data/rules/windows/create_stream_hash/create_stream_hash_file_sharing_domains_download_susp_extension.yml', 'data/rules/windows/create_stream_hash/create_stream_hash_hktl_generic_download.yml']}]
  0%|                                                   | 0/155 [00:00<?, ?it/s]
Traceback (most recent call last):
  File "/Users/dgreenwood/Documents/repos/dogesec/sigma2stix/sigma2stix.py", line 21, in <module>
    Sigma2Stix(branch=args.sigma_version_tag).run(args.mode, args.file)
  File "/Users/dgreenwood/Documents/repos/dogesec/sigma2stix/src/sigma2stix.py", line 50, in run
    temp_data += self.parser.parse_indicator(data, file, url)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/dgreenwood/Documents/repos/dogesec/sigma2stix/src/parser.py", line 23, in parse_indicator
    created=datetime.strptime(data.get('date'), "%Y/%m/%d"),
            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TypeError: strptime() argument 1 must be str, not datetime.date