Unexpected errors (and other errors) converting Sigma rule from SigmaHQ #33
Description
I used the Access to ADMIN$ Share rule as an example and found I had to make two changes in order for UncoderIO to process it. It's possible that the rule is not well-formed but since it came from the SigmaHQ repo and was authored by Florian Roth I thought I would report it here:
- I needed to add a
referenceslist - I needed to remove (or comment out)
descriptionfromlogsource