pySigma + sigma-cli

venv

Converts Sigma rules to real backend queries (Splunk, Elastic, and friends).

Location

/opt/detectops/detection-engineering/venv

How to run

source /opt/detectops/detection-engineering/venv/bin/activate
sigma convert -t splunk -p sysmon rule.yml

---

Part of the Detection Engineering toolset in DetectOps.