Yara L function which converts string to integer

[Mufa_shah]

Hi All,

Any YARA-L functions, which converts the UDM field  -> "0" ( string value ) to Integer one or can be fixed through parsers only.

Below is the sceneraio  

[jstoner · Accepted solution]

If you need this today, the parser extension is the place to do this. There are additional options coming shortly to do this with rules and search, but if you need it today, the parser is your best option.

[JeremyLand]

@Mufa_shah Update:  The 'additional options' mentioned by jstoner are in preview now and should be available on all tenants.
cast.as_float() works in both detection rules & udm search.
https://cloud.google.com/chronicle/docs/detection/yara-l-2-0-functions/cast-as_float#castas_float (link updated 4/14/25)

[hzmndt]

cast.as_float it's not listed in the link above, but it's showing in 

https://cloud.google.com/chronicle/docs/detection/yara-l-2-0-functions/cast-as_float#castas_float