opencti icon indicating copy to clipboard operation
opencti copied to clipboard
verified publisher icon OpenCTI-Platform

OpenCTI failed to validate YARA rules containing "\r" escape sequence in text strings.

Open romain-filigran opened this issue 1 year ago • 1 comments

Description

OpenCTI failed to validate and import YARA rules containing "\r" escape sequence in text strings.

Environment

  1. OpenCTI version: 6.2.18

Reproducible Steps

Import a YARA rule containing the "\r" escape sequence in text strings.

romain-filigran avatar Sep 09 '24 12:09 romain-filigran

Do you have the bundle that fails ? Are you sure that it is correctly formatted? Shouldn't \n or \r\n be used instead of \r ?

JeremyCloarec avatar Oct 16 '24 09:10 JeremyCloarec