From 9ef314486e5eb603f4bb9573da8f01adca8acdb8 Mon Sep 17 00:00:00 2001 From: Thomas Patzke Date: Tue, 19 Feb 2019 14:49:06 +0100 Subject: [PATCH] Grep backend escapes + --- tools/sigma/backends/misc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/sigma/backends/misc.py b/tools/sigma/backends/misc.py index 56cf80b67..a75b999dd 100644 --- a/tools/sigma/backends/misc.py +++ b/tools/sigma/backends/misc.py @@ -23,7 +23,7 @@ class GrepBackend(BaseBackend, QuoteCharMixin): identifier = "grep" active = True - reEscape = re.compile("([\\|()\[\]{}.^$])") + reEscape = re.compile("([\\|()\[\]{}.^$+])") def generateQuery(self, parsed): return "grep -P '^%s'" % self.generateNode(parsed.parsedSearch)