This pattern is failing to be validated about cti-stix-validator HOT 2 CLOSED

I'm going to close this as there hasn't been any updates for a few months. Please feel free to reopen it or file a new issue if the above suggestion did not work for you. Thanks!

from cti-stix-validator.

Hi, @infosec-alchemist! The STIX 2.0 Patterning Spec specifies that in a string the backslash character must be followed by another backslash or an apostrophe. You'll need to escape your backslashes. The following passes the pattern validator for me:

[email-addr:value MATCHES '.+\\@IBM\\.com$' OR file:name MATCHES '^Final Report.+\\.exe$']

Note that the pattern will need another layer of escaping for JSON. So in the actual JSON given to the STIX validator, each instance of the backslash from your original pattern would need to be '\\\\'.

from cti-stix-validator.