search

theflakes / sigma_to_wazuh

Convert Sigma rules to Wazuh rules
MIT License
55 stars 15 forks source link

No reason to honor startswith / endswith when forced to use full_log field #2

Closed theflakes closed 3 years ago

theflakes commented 3 years ago

No reason to honor startswith / endswith when forced to use full_log field

theflakes commented 3 years ago

Added "handle_full_log_field" def to handle this.