sigma icon indicating copy to clipboard operation
sigma copied to clipboard

Mitre config files missing from PyPI package

Open sanason opened this issue 4 years ago • 2 comments

The tools/config/mitre files used by the es-rule backend are not loaded in the version 0.18.1 PyPI package.

Running the PyPI-installed sigmac against the es-rule backend:

$ pip install sigmatools
$ sigmac --target es-rule --config some_config some_rule
Failed to open /usr/lib/python3.8/site-packages/config/mitre/tactics.json configuration file '%s': %s
Failed to open /usr/lib/python3.8/site-packages/config/mitre/techniques.json configuration file '%s': %s

This doesn't break the rule conversion but the threat field is not populated in the resulting rule.

The same command works correctly when run from a cloned sigma repo.

sanason avatar Sep 12 '20 15:09 sanason

I am encountering the same issue. Any update on this?

maximilienroberti avatar Mar 16 '21 10:03 maximilienroberti

Same issue. Any arguments I can use to provide the path to mitre config files?

ar3diu avatar Nov 01 '22 12:11 ar3diu