Detection Rules Optimisation Integration Deployment
Project description
droid
droid is a PySigma wrapper allowing an easy adoption of Sigma and helps enabling Detection-As-Code. The ultimate goal of droid is to consume a repository Sigma rules and deploy them on one or multiple platform (SIEM/EDR). The tool also supports plain SIEM/EDR search queries.
🚀 Features
Key features are:
- Validate the syntax of Sigma rules
- Convert them by applying a set of transforms per log source and platform
- Search in logs and report on findings
- Test the rules by leveraging Atomic Red Team™ (work in progress)
- Deploy them with any compatible SIEM and EDR (.e.g. Splunk, Microsoft Sentinel)
🚂 Get started
To get started with the tool, visit the documentation page and configure droid for your environment.
Note: Python version 3.11.8+ is required
📚 Resources
License
Licensed under the EUPL.
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file detect_droid-0.2.20.tar.gz.
File metadata
- Download URL: detect_droid-0.2.20.tar.gz
- Upload date:
- Size: 45.2 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
d9b07e5e5bb70a8fc5f9835d87d599143c3c08a9807134e289f62266eb6596c0
|
|
| MD5 |
687e18cb2c7cc9418154d0d38e685d47
|
|
| BLAKE2b-256 |
4330a175d12de59b58c6b12240939edcda0a3d8905a00995b80e83c5f0fc927f
|
File details
Details for the file detect_droid-0.2.20-py3-none-any.whl.
File metadata
- Download URL: detect_droid-0.2.20-py3-none-any.whl
- Upload date:
- Size: 53.0 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
dcf6eddaa9c6392fdf34e2693b35e5d86a01a18ed204eb0fa5262f96d9d505ec
|
|
| MD5 |
c4122ab95abf56072f08c7edb3277fb5
|
|
| BLAKE2b-256 |
59eb95b43977cd8231dfaeac689113e6982bff3a59a3bb3766e9427660500fa1
|
