Detection Rules Optimisation Integration Deployment
Project description
droid
droid is a PySigma wrapper allowing an easy adoption of Sigma and helps enabling Detection-As-Code. The ultimate goal of droid is to consume a repository Sigma rules and deploy them on one or multiple platform (SIEM/EDR). The tool also supports plain SIEM/EDR search queries.
🚀 Features
Key features are:
- Validate the syntax of Sigma rules
- Convert them by applying a set of transforms per log source and platform
- Search in logs and report on findings
- Test the rules by leveraging Atomic Red Team™ (work in progress)
- Deploy them with any compatible SIEM and EDR (.e.g. Splunk, Microsoft Sentinel)
🚂 Get started
To get started with the tool, visit the documentation page and configure droid for your environment.
📚 Resources
License
Licensed under the EUPL.
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
detect_droid-0.2.7.tar.gz
(39.1 kB
view details)
Built Distribution
File details
Details for the file detect_droid-0.2.7.tar.gz.
File metadata
- Download URL: detect_droid-0.2.7.tar.gz
- Upload date:
- Size: 39.1 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/5.1.1 CPython/3.12.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | afc8c44f361dece90567afabc661289d55b8887e941a83cd878bfe59c0737c03 |
|
| MD5 | 869883b251d4585cb2460e084e6e5ca4 |
|
| BLAKE2b-256 | 6294c141a2daaa736869946b85bc6b425215f6b36d0160212137cfb06c811d25 |
File details
Details for the file detect_droid-0.2.7-py3-none-any.whl.
File metadata
- Download URL: detect_droid-0.2.7-py3-none-any.whl
- Upload date:
- Size: 46.7 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/5.1.1 CPython/3.12.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | b34320a4cc98f0d3902b159a45a50ad1961c76e93e61a5aa0a5a6e96b481646b |
|
| MD5 | a9e728ff4b1afcb88e6cdcc1b51cc8a6 |
|
| BLAKE2b-256 | 298af718e2d766ac03fd55e2eb2f1ec9bac0589ec86781d4a2d6936c611a4741 |
