[FR] Add Support for Sigma Rules

[rc-csmith]

Which category is the feature part of?

• [ ] Definition File
• [ ] Code Feature
• [x] Other (please explain)

Which product is the feature part of?

• [x] All products
• [ ] Carbon Black Response
• [ ] Threat Hunter
• [ ] Defender for Endpoint
• [ ] Sentinel1

Use Cases Definition files are easy and fast to write but they are not very flexible (specifically, they do not support AND logic without using the query field)

Proposal Sigma rule syntax allows for greater flexibility

Additional context There is already python code called pySigma (link) that can be used. Support for all but Cortex XDR is available.