Marshall Yang

Results 1 issues of Marshall Yang

The below code shows the opposite check for the field existence check for sigma rules https://github.com/SigmaHQ/pySigma-backend-elasticsearch/blob/43fb3ba3945c143fb5912bb02e8f35bf5bcd22c5/sigma/backends/elasticsearch/elasticsearch_esql.py#L98-L100 When parsing below rule to ESQL, the condition for existence check is opposite ```...