diff --git a/tools/sigma/backends/carbonblack.py b/tools/sigma/backends/carbonblack.py index e85d23469..5373d0e2b 100644 --- a/tools/sigma/backends/carbonblack.py +++ b/tools/sigma/backends/carbonblack.py @@ -167,6 +167,7 @@ class CarbonBlackQueryBackend(CarbonBlackWildcardHandlingMixin, SingleTextQueryB def generateMapItemNode(self, node): fieldname, value = node if fieldname == "EventID" and (type(value) is str or type(value) is int): + value = str(value) fieldname = self.generateEventKey(value) value = self.generateEventValue(value) if fieldname.lower() in self.excluded_fields: