Skip to content

"Generate: false" being ignored when chaining correlation rules. - #583

Open
FlomoN wants to merge 2 commits into
SigmaHQ:mainfrom
FlomoN:main
Open

FlomoN wants to merge 2 commits into
SigmaHQ:mainfrom
FlomoN:main

Conversation

@FlomoN

@FlomoN FlomoN commented Oct 5, 2026

Copy link
Copy Markdown

I've noticed that when chaining multiple correlation rules, all correlation rules always get generated even when explicitly using generate: false.

Added a test and a fix.

@kleimkuhler kleimkuhler left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants