search

oasis-open / cti-pattern-validator

OASIS TC Open Repository: Validate patterns used to express cyber observable content in STIX Indicators
https://stix2-patterns.readthedocs.io/
BSD 3-Clause "New" or "Revised" License
26 stars 23 forks source link

Validation of IN operator #72

Open danneberg opened 4 years ago

danneberg commented 4 years ago

IOC_20200309_092215_in.json.txt

I tried to validate the following stix pattern: [file:hashes.MD5 IN ('3dc0fcf6d5de198741dfba217dee2a9b','3dc0fcf6d5de198741dfba217dee2a9b')]

and received attern failed to validate: FAIL: '(3dc0fcf6d5de198741dfba217dee2a9b,3dc0fcf6d5de198741dfba217dee2a9b)' is not a valid MD5 hash.

But each hash should be validated seperately.