Detection Rules Optimisation Integration Deployment
Project description
droid
droid is a PySigma wrapper allowing an easy adoption of Sigma and helps enabling Detection-As-Code. The ultimate goal of droid is to consume a repository Sigma rules and deploy them on one or multiple platform (SIEM/EDR). The tool also supports plain SIEM/EDR search queries.
🚀 Features
Key features are:
- Validate the syntax of Sigma rules
- Convert them by applying a set of transforms per log source and platform
- Search in logs and report on findings
- Test the rules by leveraging Atomic Red Team™ (work in progress)
- Deploy them with any compatible SIEM and EDR (.e.g. Splunk, Microsoft Sentinel)
🚂 Get started
To get started with the tool, visit the documentation page and configure droid for your environment.
📚 Resources
License
Licensed under the EUPL.
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
detect_droid-0.2.4.tar.gz
(38.2 kB
view details)
Built Distribution
File details
Details for the file detect_droid-0.2.4.tar.gz.
File metadata
- Download URL: detect_droid-0.2.4.tar.gz
- Upload date:
- Size: 38.2 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/5.1.1 CPython/3.12.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | 258c77f2e698dbe37cba9c7c301b5e3bfe9c700ed105ae514ffd911cb3d206e4 |
|
| MD5 | 90585fa1e0d9d3b738a8a5b78c3a13a6 |
|
| BLAKE2b-256 | 8ed2ebe38cb1c3032700088d3406e7adecf84ef87cba99504d8c13c91a7abaaa |
File details
Details for the file detect_droid-0.2.4-py3-none-any.whl.
File metadata
- Download URL: detect_droid-0.2.4-py3-none-any.whl
- Upload date:
- Size: 46.0 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/5.1.1 CPython/3.12.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | 3a29760f61893a59130da7d53029530c79733128927732d5370bacd6fbb12684 |
|
| MD5 | 9fef58a702c9eaf929c712b32acf2f01 |
|
| BLAKE2b-256 | 866d5ac8d47915832ac82854685f1a0ebe1424256b2992be3abf854b094dbb6f |
