Skip to main content

Tools for the Generic Signature Format for SIEM Systems

Project description

This package contains libraries for processing of [Sigma rules](https://github.com/Neo23x0/sigma) and the following command line tools:

  • sigmac: converter between Sigma rules and SIEM queries:
    • Elasticsearch query strings

    • Kibana JSON with searches

    • Splunk SPL queries

    • Elasticsearch X-Pack Watcher

    • Logpoint queries

  • merge_sigma: Merge Sigma collections into simple Sigma rules.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distribution

sigmatools-0.1.1-py3-none-any.whl (26.7 kB view hashes)

Uploaded Python 3

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page