From 7141a05fff43242147b8adaacd0d77732ccea34e Mon Sep 17 00:00:00 2001 From: cccs-mog <117194682+cccs-mog@users.noreply.github.com> Date: Thu, 29 Aug 2024 13:49:14 -0400 Subject: [PATCH] Trying to match tags with prescript signatures --- cape/cape_main.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cape/cape_main.py b/cape/cape_main.py index b888171..0292469 100644 --- a/cape/cape_main.py +++ b/cape/cape_main.py @@ -493,7 +493,7 @@ def _general_flow( for match in matches: strings = match.strings rule_name = match.rule - _ = add_tag(prescipt_detection_section, "rule.yara.prescript", rule_name) + _ = add_tag(prescipt_detection_section, "file.rule.prescript", f"prescript_cape.{rule_name}") matched_strings = "" for matched_string in strings: for matched_instance in matched_string.instances: