SigmaHQ/sigma

Features

• Log Analysis Tools - Generic signature format for SIEM detection rules.
• Detection Content Libraries - Provides a universal, platform-agnostic format for detection content.
• Signature Rules - Generic signature format for detecting malicious events in logs.