iSecNG
diff --git a/‎sigma/modifiers.py‎
Lines changed: 2 additions & 0 deletions b/‎sigma/modifiers.py‎
Lines changed: 2 additions & 0 deletions
diff --git a/‎wheels/pysigma-0.11.23-py3-none-any.whl‎
13 Bytes b/‎wheels/pysigma-0.11.23-py3-none-any.whl‎
13 Bytes
@@ -519,6 +519,8 @@ def modify(self, val: SigmaString) -> SigmaString:
             identifier = (
                 "<iSecNG><is-in-list-modifier>1758064836.781846<is-in-list-modifier><iSecNG>"
             )
+            if self.detection_item.field == identifier:
+                return val
             val = f"{self.detection_item.field} IN " + val + identifier
             self.detection_item.field = identifier
         else:
Original file line number	Diff line number	Diff line change
`@@ -519,6 +519,8 @@ def modify(self, val: SigmaString) -> SigmaString:`
`519`	`519`	`identifier = (`
`520`	`520`	`"<iSecNG><is-in-list-modifier>1758064836.781846<is-in-list-modifier><iSecNG>"`
`521`	`521`	`)`
	`522`	`+ if self.detection_item.field == identifier:`
	`523`	`+ return val`
`522`	`524`	`val = f"{self.detection_item.field} IN " + val + identifier`
`523`	`525`	`self.detection_item.field = identifier`
`524`	`526`	`else:`