diff --git a/stix_shifter_modules/crowdstrike_alerts/stix_translation/query_constructor.py b/stix_shifter_modules/crowdstrike_alerts/stix_translation/query_constructor.py index 1650c3022..ca9202cb7 100644 --- a/stix_shifter_modules/crowdstrike_alerts/stix_translation/query_constructor.py +++ b/stix_shifter_modules/crowdstrike_alerts/stix_translation/query_constructor.py @@ -50,7 +50,9 @@ def _parse_mapped_fields(self, value, comparator, mapped_fields_array) -> str: comparison_strings = [] if isinstance(value, str): - value = [value] + value = [value] + if isinstance(value,int): + value = [value] for val in value: for mapped_field in mapped_fields_array: comparison_strings.append(f"{mapped_field}{comparator} '{val}'")