diff --git a/sigma/conversion/base.py b/sigma/conversion/base.py index be8a0c08..45caafcf 100644 --- a/sigma/conversion/base.py +++ b/sigma/conversion/base.py @@ -1110,7 +1110,7 @@ def convert_condition_field_eq_val_cidr( netmask=cidr.network.netmask, ) else: # No native CIDR support: expand into string wildcard matches on prefixes. - expanded = cidr.expand(self.wildcard_multi) + expanded = cidr.expand() expanded_cond = ConditionOR( [ ConditionFieldEqualsValueExpression(cond.field, SigmaString(network))