change START / STOP regex to include <= year 2000 (#1640)

stix_shifter_modules/qradar/stix_translation/query_constructor.py

@@ -18,7 +18,7 @@
 
 FILTERING_DATA_TYPES = {"x-qradar:INOFFENSE": "INOFFENSE"}
 
-START_STOP_STIX_QUALIFIER = r"START((t'\d{4}(-\d{2}){2}T\d{2}(:\d{2}){2}(\.\d+)?Z')|(\s\d{13}\s))STOP"
+START_STOP_STIX_QUALIFIER = r"START((t'\d{4}(-\d{2}){2}T\d{2}(:\d{2}){2}(\.\d+)?Z')|(\s\d{12,}\s))STOP"
 TIMESTAMP = r"^'\d{4}(-\d{2}){2}T\d{2}(:\d{2}){2}(\.\d+)?Z'$"
 TIMESTAMP_MILLISECONDS = r"\.\d+Z$"