diff --git a/tools/sigma/backends/limacharlie.py b/tools/sigma/backends/limacharlie.py index a16da3384..b4ca4a49d 100644 --- a/tools/sigma/backends/limacharlie.py +++ b/tools/sigma/backends/limacharlie.py @@ -558,7 +558,7 @@ class LimaCharlieBackend(BaseBackend): result = { "op": "matches", "path": fieldname, - "re": re.compile(value), + "re": str(value), } if self._postOpMapper is not None: result = self._postOpMapper(result)