Skip to content

Commit 7a66086

Browse files
Sigma Rule Supported Modifier Update (2026-04-01 21:42:36) (#1015)
Co-authored-by: YamatoSecurity <YamatoSecurity@users.noreply.github.com>
1 parent 402d2c0 commit 7a66086

1 file changed

Lines changed: 5 additions & 5 deletions

File tree

doc/SupportedSigmaFieldModifiers.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,12 +6,12 @@
66
| base64ǀcontains | 1 | 0 |
77
| cased | 0 | 0 |
88
| cidr | 35 | 0 |
9-
| contains | 3025 | 21 |
10-
| containsǀall | 1063 | 0 |
9+
| contains | 3027 | 21 |
10+
| containsǀall | 1066 | 0 |
1111
| containsǀcased | 0 | 0 |
1212
| containsǀexpand | 1 | 0 |
1313
| containsǀwindash | 104 | 0 |
14-
| endswith | 3208 | 273 |
14+
| endswith | 3212 | 273 |
1515
| endswithfield | 0 | 0 |
1616
| endswithǀcased | 0 | 0 |
1717
| endswithǀwindash | 2 | 0 |
@@ -30,7 +30,7 @@
3030
| reǀi | 1 | 0 |
3131
| reǀm | 0 | 0 |
3232
| reǀs | 0 | 0 |
33-
| startswith | 527 | 6 |
33+
| startswith | 528 | 6 |
3434
| startswithǀcased | 0 | 0 |
3535
| utf16beǀbase64offsetǀcontains | 0 | 0 |
3636
| utf16leǀbase64offsetǀcontains | 0 | 0 |
@@ -58,5 +58,5 @@ Currently, everything is supported.
5858

5959

6060
This document is being dynamically updated based on the latest rules.
61-
Last Update: 2026/03/30
61+
Last Update: 2026/04/01
6262
Author: Fukusuke Takahashi

0 commit comments

Comments
 (0)