sifex / pysigma-backend-azure Goto Github PK

I want to use this plugin with sigma-cli for conversions of rules.
"sigma plugins install" needs >=0.10.x to install your plugin, but it fails the compatibility check and throws python errors if I ignore checks.
I'm requesting an uplift to 0.10.3 or higher.

Description

Hi! When converting windows/process_creation and applying the azure_windows pipeline, the expression EventID =~ 4688 triggers the following error in Sentinel: The operator '=~' is not defined for the operand types int and long.

Is this error normal? If not, changing the eq_token would probably resolve the issue.