The rsigma Sigma rule processing library has gaps in parity with pySigma for correlation and filter rule…
The rsigma Sigma rule processing library has gaps in parity with pySigma for correlation and filter rule…: a task in LegoFlow-SWE (Harbor dataset). Correlation Rules Missing Fields: Correlation rules are missing required fields that exist in pySigma: related , license , fields , and scope …
The task
**Correlation Rules Missing Fields:** Correlation rules are missing required fields that exist in pySigma: `related`, `license`, `fields`, and `scope`. Additionally, the threshold condition’s `field` currently only accepts a single optional string, but pySigma supports specifying multiple fields (it should be a list…
Part of Lego-X/LegoFlow-SWE.