security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
1e4ef648db0714c7a2346fd8d1cf7902dbc971f1
blue-team-tools/tools
T
History
Florian Roth 3d333290a9 Merge pull request #445 from EccoTheFlintstone/localadmin 
rule: user added to local administrator: handle non english systems b…
2019-09-25 17:29:41 +02:00
..
config
add GroupSid to other configs
2019-09-11 04:53:30 -04:00
sigma
Changed xpack-watcher dateField default to previous value
2019-09-12 00:19:58 +02:00
tests
Sigmatools release 0.12
2019-08-01 23:45:07 +02:00
merge_sigma
Fixes for parser split
2018-07-27 00:02:07 +02:00
README.md
Sigma tools release 0.11
2019-05-30 22:56:38 +02:00
requirements-devel.txt
Added requirements
2018-10-22 22:43:59 +02:00
requirements-misp.txt
Added requirements
2018-10-22 22:43:59 +02:00
requirements.txt
Intermediate refactoring commit: moving code into package
2017-12-08 21:45:05 +01:00
setup.cfg
Intermediate refactoring commit: moving code into package
2017-12-08 21:45:05 +01:00
setup.py
Fixed build
2019-08-05 23:42:33 +02:00
sigma2genericsigma
Increased indentation to 4
2019-03-02 00:14:20 +01:00
sigma2misp
Dropped .py suffix
2018-10-22 23:02:05 +02:00
sigmac
Merge branch 'devel-modifiers'
2019-07-31 23:44:10 +02:00

README.md

This package contains libraries for processing of Sigma rules and the following command line tools:

  • sigmac: converter between Sigma rules and SIEM queries:
    • Elasticsearch query strings
    • Kibana JSON with searches
    • Splunk SPL queries
    • Elasticsearch X-Pack Watcher
    • Logpoint queries
  • merge_sigma: Merge Sigma collections into simple Sigma rules.
  • sigma2misp: Import Sigma rules to MISP events.
Reference in New Issue View Git Blame Copy Permalink