From 23ed626287c7160021e8dcd7e7e56cd61c7e3c01 Mon Sep 17 00:00:00 2001 From: Jordi Schoots Date: Mon, 1 Nov 2021 16:05:34 +0100 Subject: [PATCH] Change location value=str(value) --- tools/sigma/backends/carbonblack.py | 1 + 1 file changed, 1 insertion(+) diff --git a/tools/sigma/backends/carbonblack.py b/tools/sigma/backends/carbonblack.py index e85d23469..5373d0e2b 100644 --- a/tools/sigma/backends/carbonblack.py +++ b/tools/sigma/backends/carbonblack.py @@ -167,6 +167,7 @@ class CarbonBlackQueryBackend(CarbonBlackWildcardHandlingMixin, SingleTextQueryB def generateMapItemNode(self, node): fieldname, value = node if fieldname == "EventID" and (type(value) is str or type(value) is int): + value = str(value) fieldname = self.generateEventKey(value) value = self.generateEventValue(value) if fieldname.lower() in self.excluded_fields: