security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cleanValue

Browse Source
This commit is contained in:
vunx2
2020-02-06 11:02:22 +07:00
parent 19d9e4856e
commit bc4c6ce8db
1 changed files with 6 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tools/sigma/backends/carbonblack.py
+6 -7
View File
@@ -127,14 +127,13 @@ class CarbonBlackBackend(SingleTextQueryBackend):
if ( "1 to" not in new_value):
new_value = new_value.replace("* ", "*")
new_value = new_value.replace(" *", "*")
if ( "(" in new_value or " " in new_value and "1 to" not in new_value):
new_value = new_value.replace('"', '\"')
# need tuning
if (( "(" in new_value or " " in new_value or ")" in new_value or ":" in new_value) and "1 to" not in new_value):
new_value = '"' + new_value +'"'
# while re.search(r'\\[\/\\\"]',str(new_value)):
# new_value = re.sub(r'\\\\', r'\\' , new_value)
# new_value = re.sub(r'\\\/', r'\/' , new_value)
# new_value = re.sub(r'\\\"', r'\"' , new_value)
# new_value = re.sub(r"\\\'", r"\'" , new_value)
new_value = new_value.replace("(", "\(")
new_value = new_value.replace(")", "\)")
new_value = new_value.replace(" ", "\ ")
new_value = new_value.strip()
if type(value) is list: