Detection Rules Optimisation Integration Deployment
Project description
droid
droid is a PySigma wrapper allowing an easy adoption of Sigma and helps enabling Detection-As-Code. The ultimate goal of droid is to consume a repository Sigma rules and deploy them on one or multiple platform (SIEM/EDR). The tool also supports plain SIEM/EDR search queries.
🚀 Features
Key features are:
- Validate the syntax of Sigma rules
- Convert them by applying a set of transforms per log source and platform
- Search in logs and report on findings
- Test the rules by leveraging Atomic Red Team™ (work in progress)
- Deploy them with any compatible SIEM and EDR (.e.g. Splunk, Microsoft Sentinel)
🚂 Get started
To get started with the tool, visit the documentation page and configure droid for your environment.
📚 Resources
License
Licensed under the EUPL.
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
detect_droid-0.2.6.tar.gz
(38.7 kB
view details)
Built Distribution
File details
Details for the file detect_droid-0.2.6.tar.gz.
File metadata
- Download URL: detect_droid-0.2.6.tar.gz
- Upload date:
- Size: 38.7 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/5.1.1 CPython/3.12.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | b0f296ed1f63b201f725194b491aff9ed2a4c3e79b8e5f98d4453164414d65f7 |
|
| MD5 | fac37ecb0416dea681f56307916607aa |
|
| BLAKE2b-256 | 76f8feac1875249c649515fa94f5f8ddc58f8eba77acd7a0d3cbe12dd0887905 |
File details
Details for the file detect_droid-0.2.6-py3-none-any.whl.
File metadata
- Download URL: detect_droid-0.2.6-py3-none-any.whl
- Upload date:
- Size: 46.4 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/5.1.1 CPython/3.12.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | 331f57bbd10e908a750f837dbfb9dab35b9700f2121dbba14f398bdd72e2c2af |
|
| MD5 | 35ff127971be00a6a2ab47b161356377 |
|
| BLAKE2b-256 | b0f14b072d5f9178737b789d4998ad1afa4d2a7d5b3b8270b0e770f1653103f4 |
