lint with black

Author: Res260

sigma/conversion/base.py

@@ -1805,11 +1805,19 @@ def convert_condition_field_compare_op_val(
                 "Expected SigmaCompareExpression for cond.value, got {type(cond_value)}"
             )
 
-        if isinstance(cond.value, SigmaCompareExpression) and cond.value.number and isinstance(cond.value.number, SigmaTimestampPart):
-            return self.field_timestamp_part_expression.format(
-                        field=self.escape_and_quote_field(cond.field),
-                        timestamp_part=self.timestamp_part_mapping[cond.value.number.timestamp_part],
-                    ) + self.compare_operators[cond_value.op] + str(cond.value.number)
+        if (
+            isinstance(cond.value, SigmaCompareExpression)
+            and cond.value.number
+            and isinstance(cond.value.number, SigmaTimestampPart)
+        ):
+            return (
+                self.field_timestamp_part_expression.format(
+                    field=self.escape_and_quote_field(cond.field),
+                    timestamp_part=self.timestamp_part_mapping[cond.value.number.timestamp_part],
+                )
+                + self.compare_operators[cond_value.op]
+                + str(cond.value.number)
+            )
         else:
             return self.compare_op_expression.format(
                 field=self.escape_and_quote_field(cond.field),

tests/test_rule.py

@@ -20,7 +20,8 @@
     SigmaNull,
     SigmaRegularExpression,
     SigmaTimestampPart,
-    TimestampPart, SigmaCompareExpression,
+    TimestampPart,
+    SigmaCompareExpression,
 )
 from sigma.modifiers import (
     SigmaBase64Modifier,