suricatals: output type of rules as a hint

StamusNetworks · Nov 13, 2024 · b84d058 · b84d058
1 parent 22913f6
commit b84d058
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/suricatals/tests_rules.py b/suricatals/tests_rules.py
@@ -595,6 +595,11 @@ def parse_engine_analysis_v2(self, json_path):
                 except JSONDecodeError:
                     pass
                 signature_msg = {'content': signature_info['raw']}
+                if 'type' in signature_info:
+                    if 'info' not in signature_msg:
+                        signature_msg['info'] = []
+                    type_msg = f'Rule type is "{signature_info["type"]}"'
+                    signature_msg['info'].append(type_msg)
                 if 'id' in signature_info:
                     signature_msg['sid'] = signature_info['id']
                 if 'flags' in signature_info: