Sigma ORG

Main Sigma Rule Repository

A community collection of 3,000+ security detection rules in a vendor-neutral format, letting you convert one rule into the query language of any security monitoring platform you use.

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

Sigma rule specification

The Sigma command line interface based on pySigma

pySigma Elasticsearch backend

pySigma Splunk backend

SigmaHQ pySigma CrowdStrike processing pipeline

pySigma Cookiecutter backend template

Validates Sigma rules using the JSON schema

Official Website Of The Sigma Project

Detection Rule License (DRL)

Legacy Sigma Tools (sigmac etc.)

No description.

No description.

pySigma OpenSearch backend

No description.

Directory of pySigma backends

SigmaHQ pySigma Sysmon processing pipeline

No description.

Datadog pySigma backend

pySigma SQlite backend

Directory of pySigma community pipelines

Sigma Workshop - writing Sigma rules and converting them into queries

No description.

Sigma MCP server for providing tools like validation to LLMs.

pySigma OSSEM pipeline for transformation of OSSEM into Sigma field naming

No description.

pySigma Golang Expr Backend

An AWS Athena backend for pySigma that converts Sigma detection rules into Athena-compatible SQL queries.

pySigma backend for converting Sigma rules to SurrealQL queries