Skip to content

Failure converting the Sigma File: rules/....yml #11

Description

@iSecRoOt

Hey I did the following

  1. install jingo2 and pyYAML on Ubuntu 20.04
sudo apt-get install -y python3-jinja2
sudo apt-get install -y python3-yaml
  1. Tried to run the python script sigma2Splunkalert

./sigma2splunkalert -c config/config.yml -sc sigma_config/splunk-all.yml rules/sysmon_mimikatz_detection_lsass.yml

-> error

# Failure converting the Sigma File: rules/sysmon_mimikatz_detection_lsass.yml

further infos:

Linux ubuntu2104 5.11.0-16-generic #17-Ubuntu SMP Wed Apr 14 20:12:43 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
NAME="Ubuntu"
VERSION="21.04 (Hirsute Hippo)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 21.04"
VERSION_ID="21.04"
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=hirsute
UBUNTU_CODENAME=hirsute

Python 3.9.4

Thanks in advance

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions