feat: add support for correlation name lookup

Yamato-Security · Jun 14, 2024 · 777b007 · 777b007
1 parent efaca57
commit 777b007
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/detections/rule/correlation_parser.rs b/src/detections/rule/correlation_parser.rs
@@ -23,6 +23,11 @@ fn is_related_rule(rule_node: &RuleNode, id_or_title: &str) -> bool {
                 return true;
             }
         }
+        if let Some(title) = hash.get(&Yaml::String("name".to_string())) {
+            if title.as_str() == Some(id_or_title) {
+                return true;
+            }
+        }
     }
     false
 }