Check of correlation rules

SigmaHQ · Feb 20, 2024 · 5d5c010 · 5d5c010
1 parent e42bec0
commit 5d5c010
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/sigma/cli/check.py b/sigma/cli/check.py
@@ -125,6 +125,8 @@ def check(
                         f"Condition error in { str(condition.source) }:{ error }"
                     )
                     cond_errors.update((error,))
+            else:
+                check_rules.append(rule)
 
         # TODO: From Python 3.10 the commented line below can be used.
         rule_error_count = sum(rule_errors.values())

diff --git a/tests/files/valid/sigma_correlation_rules.yml b/tests/files/valid/sigma_correlation_rules.yml
@@ -30,9 +30,10 @@ correlation:
     condition:
         gte: 10
 ---
-title: Multiple occurrences of base event
+title: Multiple occurrences of base event with different values
 description: This is a correlation rule
 id: 16a288b8-4ed2-440f-9984-7a128e86e006
+date: 2023-12-09
 status: test
 level: medium
 correlation: