issues
search
SigmaHQ
/
pySigma
Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
GNU Lesser General Public License v2.1
375
stars
95
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Match Rules based on their Fields (RuleContainsFieldCondition)
#272
HenrikWittemeier
opened
1 day ago
0
strict version dependency on packaging makes dependency conflicts when installing with other libraries
#271
honi-at-simspace
closed
2 days ago
3
Nested processing pipelines
#270
thomaspatzke
closed
4 days ago
0
Taking into account Specification V2
#269
frack113
closed
2 days ago
0
Fix: restricted ReplaceStringTransformation/replace_string to plain string parts
#268
thomaspatzke
closed
6 days ago
0
Fix: too many backslashes dropped in regular expressions
#267
thomaspatzke
closed
6 days ago
0
ModuleNotFoundError: No module named 'pysigma'
#265
honi-at-simspace
closed
6 days ago
1
Class CompareOperators is private
#264
Res260
opened
2 weeks ago
1
Update Mitre to v15.1
#263
frack113
closed
2 weeks ago
0
Bug with `replace_string` transformation
#262
joshnck
closed
6 days ago
5
Taking into account Specification V2
#261
frack113
closed
5 days ago
2
Add `set_custom_attribute` transformation and tests
#260
kelnage
closed
6 days ago
0
Small typo fixes and additions
#259
nasbench
closed
6 days ago
0
Update SigmaLogSource class
#258
frack113
closed
3 weeks ago
0
Add list as tuple in validator configuration
#256
frack113
closed
3 weeks ago
0
feat: add mitre d3fend namespace
#255
nasbench
closed
3 weeks ago
0
Pipeline condition expressions
#254
thomaspatzke
closed
4 weeks ago
0
add new validator - DanglingCondition
#253
nasbench
closed
4 weeks ago
0
Fixes #241 - Pipeline Resolving Issue
#252
nasbench
closed
4 weeks ago
0
Some update to the validators
#250
frack113
closed
4 weeks ago
0
sigma.exceptions.SigmaRegularExpressionError: Regular expression 'X' is invalid: bad escape (end of pattern) at position Y
#249
Res260
closed
6 days ago
12
update tags to use dashes
#248
nasbench
closed
1 month ago
1
Allow SigmaRuleTag objects to be compared with their string represent…
#247
Res260
closed
1 month ago
0
`SigmaString` class incorrectly escapes double backslashes
#246
majikman111
closed
1 month ago
1
sigma.exceptions.SigmaValueError: Can't merge value lists '<field>' into one item due to different logical linking.
#245
Res260
opened
1 month ago
6
Validator refractor
#244
frack113
closed
1 month ago
1
Include netwitness backend in the related projects section
#243
marcelkwaschny
closed
1 month ago
1
feat: Add custom_param to SigmaValidator class
#242
frack113
closed
1 month ago
0
Force pySigma to only accept proper pipeline file types when passing a full folders of pipelines
#241
joshnck
closed
4 weeks ago
1
Fix type hints for conversion base
#240
nikstuckenbrock
closed
1 month ago
0
FieldnameLogsourceValidator fails with Correlation rules
#239
Res260
closed
1 month ago
1
Resolve directory for pipelines
#238
Res260
closed
1 month ago
1
Fix bug when applying a filter to multiple rules
#237
cccs-cs
closed
1 month ago
1
Transformation to support whether a pipeline is applied or not
#236
joshnck
closed
4 days ago
3
Extended transformation condition logic options
#235
joshnck
closed
4 weeks ago
2
Remove useless sigmahq validator
#234
frack113
closed
2 months ago
0
Add em dash, en dash and horizontal bar to windash modifier
#233
martinspielmann
closed
2 months ago
1
Fix links in Plugin System doc
#232
alexott
closed
2 months ago
0
[Filters] Sigma Filters don't work in specific mutliple rules definition scenario
#231
sifex
closed
1 month ago
1
[Correlations] ES|QL should perform a unique reduction on indexes
#230
sinnwise
closed
2 months ago
1
Add name field logsource validator
#228
frack113
closed
2 months ago
0
[Sigma Filters] Introducing Sigma Filters (Sigma Defeats) in Alpha / Development Preview
#226
sifex
closed
2 months ago
3
Sigma accepting malformed yaml in SigmaDetectionItem fields
#225
twpZero
closed
2 months ago
1
Fix Detection Field Validation in rule.py
#224
twpZero
closed
2 months ago
1
Apply pipelines to correlation rules also
#221
Mat0vu
closed
3 months ago
1
Missing condition check in pipelines / ProcessingItem
#219
bast00
closed
3 months ago
3
Added `FieldFunctionTransformation` class to perform programmatic transformation
#218
alexott
closed
3 months ago
2
add_condition processing object not acting as expected
#217
joshnck
closed
4 months ago
1
Processing pipeline guidance
#216
kartone
closed
2 months ago
8
feat: ✨ Load custom field in the logsource
#215
frack113
closed
2 months ago
2
Next