Compare commits
3 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 19cc299c57 | |||
| fd7b7bb438 | |||
| da9127276c |
@@ -108,6 +108,14 @@ merges multiple YAML documents of a Sigma rule collection into simple Sigma rule
|
||||
|
||||
The usage of Sigmac or the underlying library requires Python >= 3.4 and PyYAML.
|
||||
|
||||
### Installation
|
||||
|
||||
It's available on PyPI. Install with:
|
||||
|
||||
```
|
||||
pip3 install sigmatools
|
||||
```
|
||||
|
||||
# Next Steps
|
||||
|
||||
* Integration of feedback into the rule specifications
|
||||
|
||||
+9
-2
@@ -1,3 +1,10 @@
|
||||
Tools in this section are currently in public beta status.
|
||||
This package contains libraries for processing of [Sigma rules](https://github.com/Neo23x0/sigma) and the following
|
||||
command line tools:
|
||||
|
||||
The ```--output``` and ```--config``` parameters are not usable yet.
|
||||
* *sigmac*: converter between Sigma rules and SIEM queries:
|
||||
* Elasticsearch query strings
|
||||
* Kibana JSON with searches
|
||||
* Splunk SPL queries
|
||||
* Elasticsearch X-Pack Watcher
|
||||
* Logpoint queries
|
||||
* *merge_sigma*: Merge Sigma collections into simple Sigma rules.
|
||||
|
||||
+1
-1
@@ -13,7 +13,7 @@ with open(path.join(here, 'README.md'), encoding='utf-8') as f:
|
||||
|
||||
setup(
|
||||
name='sigmatools',
|
||||
version='0.1',
|
||||
version='0.1.1',
|
||||
description='Tools for the Generic Signature Format for SIEM Systems',
|
||||
long_description=long_description,
|
||||
url='https://github.com/Neo23x0/sigma',
|
||||
|
||||
Reference in New Issue
Block a user