contentctl icon indicating copy to clipboard operation
contentctl copied to clipboard
verified publisher icon splunk

New SSA Content Missing Search Field

Open pyth0n1c opened this issue 3 years ago • 0 comments

When generating new content with: python3 contentctl.py -p . new_content -t detection and choosing SSA instead of ESCU, the generated detection .yml field is missing the search field.

pyth0n1c avatar Nov 14 '22 18:11 pyth0n1c