From dcec368e9e74a8079224c0ae40ff3738534b7ad9 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sat, 19 Oct 2024 21:11:47 +0000 Subject: [PATCH] Sigma Rule Supported Modifier Update (2024-10-19 21:11:41) (#753) Co-authored-by: YamatoSecurity --- doc/SupportedSigmaFieldModifiers.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/SupportedSigmaFieldModifiers.md b/doc/SupportedSigmaFieldModifiers.md index 8c9bfd64c..ece58787a 100644 --- a/doc/SupportedSigmaFieldModifiers.md +++ b/doc/SupportedSigmaFieldModifiers.md @@ -42,7 +42,7 @@ | event_count | 0 | 0 | | event_count (with group-by) | 0 | 1 | | value_count | 0 | 0 | -| value_count (with group-by) | 0 | 1 | +| value_count (with group-by) | 0 | 2 | # Hayabusa un-supported correlations rules | Correlation Rule | Sigma Count | Hayabusa Count | @@ -51,5 +51,5 @@ | temporal_count (with group-by) | 0 | 0 | This document is being dynamically updated based on the latest rules. -Last Update: 2024/10/18 +Last Update: 2024/10/19 Author: Fukusuke Takahashi \ No newline at end of file