A simple tool for converting Sigma detection rules to Securonix Snypr Spotter queries.
- Python version 3.x or later
pip install securonix-cligit clone https://github.com/Securonix/SigmaToSecuronix
cd SigmaToSecuronix
poetry install && poetry shell
securonix-cli convert --mapping config/mapping.yml input_file.yml
--help: Show help message and exit--mapping,-m: Sigma mapping file (required)
- Microsoft Windows
- Endpoint Management Systems
- Web Server
- Web Proxy
- Microsoft Windows Powershell
- Next Generation Firewall
This project welcomes contributions from the community. If you would like to contribute, please fork the repository and make your changes. Then, submit a pull request for review.