Support fieldref combined with contains, startswith, and endswith - #506

Merged

mostafa merged 12 commits into

mainfrom

fix/fieldref-string-modifiers

Sep 25, 2026

Commits on Sep 25, 2026

fix: compare fields with fieldref contains, startswith, and endswith
mostafa
committed
51aa3c2
fix: align incompatible_modifiers with fieldref and neq
mostafa
committed
05c0f9b
fix: render fieldref contains, startswith, and endswith
mostafa
committed
9709249
fix: recognize case-insensitive fibratus field comparisons
mostafa
committed
08923eb
fix: render the neq modifier in native backends
mostafa
committed
b1f0edb
docs: describe fieldref string modifiers and neq conversion
mostafa
committed
c4354e1
docs: cite the pull request in the changelog
mostafa
committed
24e9d15
fix: apply neq to regex, cidr, and timestamp matchers
mostafa
committed
199302f
fix: negate deferred expressions under neq
mostafa
committed
abfd265
fix: negate the whole detection item under neq
mostafa
committed
d1109e4
fix: compare postgres fieldref equality case-insensitively
mostafa
committed
50098a5
docs: describe whole-item neq and case-insensitive postgres fieldref
mostafa
committed
73c8ea3