pySigma 0.7.0

Change details

• Centralized string quoting and decision about it into methods.
• Conditional quoting based on pattern.
• Improved CIDR matching
  • Consolidated logic into less methods.
  • The class attribute cidr_expression defines an expression for native CIDR matching. If this is not present, the CIDR value is expanded into string wildcard matches that are ORed. The existing expression conversion logic is used in this case.

Breaking changes

• quotes have to be removed from template strings.
• only cidr_expression is supporte as class attribute. For the other values that had to be defined previously, defined in-list expressions are used.