Content-Length: 1281 | pFad | http://github.com/UncoderIO/Uncoder_IO/pull/25.diff

thub.com diff --git a/siem-converter/app/converter/platforms/splunk/renders/splunk_alert.py b/siem-converter/app/converter/platforms/splunk/renders/splunk_alert.py index c6b233de..3ffeca70 100644 --- a/siem-converter/app/converter/platforms/splunk/renders/splunk_alert.py +++ b/siem-converter/app/converter/platforms/splunk/renders/splunk_alert.py @@ -55,13 +55,9 @@ def finalize_query(self, prefix: str, query: str, functions: str, meta_info: Met rule = rule.replace("", severity_map.get(meta_info.severity, "1")) rule_description = get_rule_description_str( description=meta_info.description or 'Autogenerated Splunk Alert.', - license=meta_info.license, - mitre_attack=meta_info.mitre_attack + license=meta_info.license ) rule = rule.replace("", rule_description) - - description = f"{meta_info.description or 'Autogenerated Splunk Alert.'} License: {meta_info.license}." - rule = rule.replace("", description) mitre_techniques = self.__create_mitre_threat(meta_info=meta_info) if mitre_techniques: mitre_str = f"action.correlationsearch.annotations = {mitre_techniques})"

pFad - (p)hone/(F)rame/(a)nonymizer/(d)eclutterfier! Saves Data!