Expand description
Detection-name glob matching for ... of selection_* selector expressions.
The selector matcher is shared by the parser, the evaluator, and the
converter so that a pattern like sel*main resolves to the same set of
detection identifiers regardless of which subsystem expands it. Keeping the
semantics in one place also avoids the historical drift between eval and
convert, where convert supported a middle * (sel*main) but eval
did not.
Functionsยง
- detection_
name_ matches - Check whether a detection identifier matches a glob
pattern.