Trying to match tags with prescript signatures

CybercentreCanada · Aug 29, 2024 · 7141a05 · 7141a05
1 parent 730c40c
commit 7141a05
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cape/cape_main.py b/cape/cape_main.py
@@ -493,7 +493,7 @@ def _general_flow(
                     for match in matches:
                         strings = match.strings
                         rule_name = match.rule
-                        _ = add_tag(prescipt_detection_section, "rule.yara.prescript", rule_name) 
+                        _ = add_tag(prescipt_detection_section, "file.rule.prescript", f"prescript_cape.{rule_name}") 
                         matched_strings = ""
                         for matched_string in strings:
                             for matched_instance in matched_string.instances: