Commitddeb57a

committed

fix bug while generating description in spl-rule

1 parent9ba370e commitddeb57aCopy full SHA for ddeb57a

File tree

-5

lines changed

-5

lines changed

Lines changed: 1 addition & 5 deletions

Original file line number	Diff line number	Diff line change
`@@ -55,13 +55,9 @@ def finalize_query(self, prefix: str, query: str, functions: str, meta_info: Met`
`55`	`55`	`rule=rule.replace("<severity_place_holder>",severity_map.get(meta_info.severity,"1"))`
`56`	`56`	`rule_description=get_rule_description_str(`
`57`	`57`	`description=meta_info.descriptionor'Autogenerated Splunk Alert.',`
`58`		`-license=meta_info.license,`
`59`		`-mitre_attack=meta_info.mitre_attack`
	`58`	`+license=meta_info.license`
`60`	`59`	`)`
`61`	`60`	`rule=rule.replace("<description_place_holder>",rule_description)`
`62`		`-`
`63`		`-description=f"{meta_info.descriptionor'Autogenerated Splunk Alert.'} License:{meta_info.license}."`
`64`		`-rule=rule.replace("<description_place_holder>",description)`
`65`	`61`	`mitre_techniques=self.__create_mitre_threat(meta_info=meta_info)`
`66`	`62`	`ifmitre_techniques:`
`67`	`63`	`mitre_str=f"action.correlationsearch.annotations ={mitre_techniques})"`

Comments

(0)