diff --git a/tools/sigma/backends/misc.py b/tools/sigma/backends/misc.py index 56cf80b67..a75b999dd 100644 --- a/tools/sigma/backends/misc.py +++ b/tools/sigma/backends/misc.py @@ -23,7 +23,7 @@ class GrepBackend(BaseBackend, QuoteCharMixin): identifier = "grep" active = True - reEscape = re.compile("([\\|()\[\]{}.^$])") + reEscape = re.compile("([\\|()\[\]{}.^$+])") def generateQuery(self, parsed): return "grep -P '^%s'" % self.generateNode(parsed.parsedSearch)