Empty string is not a valid regex

SigmaHQ · Nov 8, 2024 · 7d1ac24 · 7d1ac24
1 parent ad6f3c3
commit 7d1ac24
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/sigma/processing/transformations.py b/sigma/processing/transformations.py
@@ -997,6 +997,11 @@ def __post_init__(self):
 
     def apply_string_value(self, field: str, val: SigmaString) -> Optional[SigmaString]:
         regex = ""
+
+        # empty string can not be convert into a simple regex
+        if val == "":
+            return val
+
         for sc in val.s:  # iterate over all SigmaString components (strings and special chars)
             if isinstance(sc, str):  # if component is a string
                 if (