pySigma icon indicating copy to clipboard operation
pySigma copied to clipboard

feat: ✨ Load custom field in the logsource

Open frack113 opened this issue 1 year ago • 0 comments

In the current version custom field are ignored in the logsource section. The side effect is you can not detect typo error and the rule will be loaded. Like in my test categorie: process_creation will give a valid category: None

I have add a SigmaLogsourceError and a optionnal custom_attributes

frack113 avatar May 03 '24 11:05 frack113