in tools/stix-to-ecs/stix_to_ecs.py [0:0]
def __visit_equality_comparison_expression(self, o) -> STIXToECSPatternParser:
lhs = o.lhs
rhs = o.rhs
if not (t := type(lhs)) == patterns.ObjectPath:
raise NotImplemented(t)
if not (t := type(rhs)) == patterns.StringConstant:
raise NotImplemented(t)
self.__loot.append(
(
convert_stix_word_to_ecs_word(lhs.object_type_name),
convert_stix_word_to_ecs_word(lhs.property_path[0].property_name),
":".join(
[
convert_stix_word_to_ecs_word(x.property_name)
for x in lhs.property_path[1:]
]
+ [rhs.value]
),
)
)
return self