A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
-
Updated
Aug 5, 2026 - Python
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
simple webapp for converting sigma rules into siem queries using the pySigma library
A reactJS web app that can take a ruleset and translate it into any SIEM search query, using Sigma
Detection-as-code pipeline with measured precision/recall against OTRF captures. 20 Sigma rules, multi-SIEM (SPL/EQL/KQL), ATT&CK coverage, two logsource baselines. By Aadarsh Kadam.
Offline detection-as-code lab for original Sigma rules, synthetic behavioral tests, ATT&CK mapping, coverage analysis, and pySigma query conversion.
Detection engineering workbench for bounded Sigma conversion, provenance, comparison, and export.
pySigma backend for Sumo Logic Cloud SIEM rule conversion
pySigma backend that compiles Sigma detection rules into IBM QRadar AQL
Detection engineering tool: load JSONL datasets, write Sigma rules, run them against OpenSearch, track findings and experiments.
pySigma backend that converts Sigma detection rules to LogsQL queries for VictoriaLogs
Add a description, image, and links to the pysigma topic page so that developers can more easily learn about it.
To associate your repository with the pysigma topic, visit your repo's landing page and select "manage topics."