sigma
sigma copied to clipboard
Mitre config files missing from PyPI package
The tools/config/mitre
files used by the es-rule
backend are not loaded in the version 0.18.1 PyPI package.
Running the PyPI-installed sigmac
against the es-rule
backend:
$ pip install sigmatools
$ sigmac --target es-rule --config some_config some_rule
Failed to open /usr/lib/python3.8/site-packages/config/mitre/tactics.json configuration file '%s': %s
Failed to open /usr/lib/python3.8/site-packages/config/mitre/techniques.json configuration file '%s': %s
This doesn't break the rule conversion but the threat
field is not populated in the resulting rule.
The same command works correctly when run from a cloned sigma repo.
I am encountering the same issue. Any update on this?
Same issue. Any arguments I can use to provide the path to mitre config files?