FireEye Helix backend does not strip '*' characters from startswith/endswith modified values

Open traut opened this issue 4 years ago • 0 comments

It seems there is a typo in the code here https://github.com/SigmaHQ/sigma/blob/48265ad71afdebd7416a8cea56055a1cf12a0c5b/tools/sigma/backends/fireeye-helix.py#L113

the result of stip function is not assigned to the value

Mar 21 '21 22:03 traut