search

SigmaHQ / sigma

Main Sigma Rule Repository
Other
8.35k stars 2.2k forks source link

NIDS/NSM Signature ID #407

Closed 0xtf closed 5 years ago

0xtf commented 5 years ago

Would be interesting to have the capability of listing signature (for example from ET Open) identifiers to rules. Similar to what was done with MITRE CAR.

thomaspatzke commented 5 years ago

Currently, many people use the file name stems or whole file names as such identifiers. It's not an official convention, more something people started to do so and I personally like this instead of adding redundancy between file names and file content.