From 823d86c7d9bd75a7db57624342c666b3bc83faa0 Mon Sep 17 00:00:00 2001 From: Maxime Lamothe-Brassard Date: Sat, 26 Oct 2019 15:54:08 -0500 Subject: [PATCH] Remove unimplemented config entries and fix bug with valueNode. --- tools/config/limacharlie.yml | 8 -------- tools/sigma/backends/limacharlie.py | 2 +- 2 files changed, 1 insertion(+), 9 deletions(-) diff --git a/tools/config/limacharlie.yml b/tools/config/limacharlie.yml index 0e9ce5341..5d04aa960 100644 --- a/tools/config/limacharlie.yml +++ b/tools/config/limacharlie.yml @@ -5,11 +5,3 @@ order: 20 logsources: windows: product: windows - - netflow: - product: netflow - index: flows - - flow: - category: flow - index: flows diff --git a/tools/sigma/backends/limacharlie.py b/tools/sigma/backends/limacharlie.py index 288b7a6de..2634e2c41 100644 --- a/tools/sigma/backends/limacharlie.py +++ b/tools/sigma/backends/limacharlie.py @@ -174,7 +174,7 @@ class LimaCharlieBackend(BaseBackend): raise TypeError("Backend does not support map values of type " + str(type(value))) def generateValueNode(self, node): - return self.valueExpression % (str(node),) + return node def generateNULLValueNode(self, node): generated = self.generateNode(node.item)