Merge pull request #150 from wbadart/main

Quick fix to rule `falsepositives` validation in `from_dict`
SigmaHQ · Oct 27, 2023 · 3dd8cd6 · 3dd8cd6
2 parents 81ce963 + e9c22b0
commit 3dd8cd6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/sigma/rule.py b/sigma/rule.py
@@ -718,7 +718,7 @@ def from_dict(
 
         # validate falsepositives
         rule_falsepositives = rule.get("falsepositives")
-        if rule_falsepositives is not None and not isinstance(rule_fields, list):
+        if rule_falsepositives is not None and not isinstance(rule_falsepositives, list):
             errors.append(
                 sigma_exceptions.SigmaFalsePositivesError(
                     "Sigma rule falsepositives must be a list",