You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
python main.py translate crowdstrike query '{}' "[process:name LIKE '%']"
Expected behavior
It should work
Screenshots
$ python main.py translate crowdstrike query '{}' "[process:name LIKE '%']"
2022-11-22 15:42:27,637 stix_shifter.stix_translation.stix_translation ERROR Caught exception: Unable to map the following STIX Operators: [Like] to data source fields <class 'stix_shifter_utils.stix_translation.src.utils.exceptions.DataMappingException'>
2022-11-22 15:42:27,638 stix_shifter_utils.stix_translation.stix_translation_error_mapper ERROR received exception => DataMappingException: Unable to map the following STIX Operators: [Like] to data source fields
{
"success": false,
"connector": "crowdstrike",
"code": "mapping_error",
"error": "crowdstrike connector error => data mapping error : Unable to map the following STIX Operators: [Like] to data source fields"
}
Describe the bug
crowdstrike connector does not support LIKE but FQL supports wildcards; see https://falconpy.io/Usage/Falcon-Query-Language.html#operators
To Reproduce
Steps to reproduce the behavior:
python main.py translate crowdstrike query '{}' "[process:name LIKE '%']"
Expected behavior
It should work
Screenshots
Additional context
develop branch, commit 01b18cb
The text was updated successfully, but these errors were encountered: