theflakes sigma_to_wazuh issues

theflakes / sigma_to_wazuh

Convert Sigma rules to Wazuh rules

MIT License

55 stars 15 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

ERROR: (1226): Error reading XML file 'etc/rules/sigmano18702.xml': XMLERR: String overflow. (line 18702).

#24 tongsak2543 opened 5 months ago
3
Recent commits break escaping of paths for some rules

#23 mcjon3z closed 5 months ago
3
Fix rules without value modifiers

#22 PiRomant closed 5 months ago
3
Sigma Value Modifiers

#21 PiRomant closed 5 months ago
4
Issue with Or Translation with negate=Yes regex

#20 CyberOverflow opened 8 months ago
8
Script does not work

#19 irfaan0999 opened 1 year ago
4
Wazuh Manager crashes when importing sigma.xml

#18 qdsmm opened 1 year ago
4
Modify Sysmon Process 1

#17 taylorwalton closed 1 year ago
0
Verify Sigma to Wazuh field name mappings

#16 theflakes opened 1 year ago
0
Problem with "

#15 n0rthl1ght closed 1 year ago
2
Some Rules Duplicated

#14 n00bsteam closed 1 year ago
4
Rule mapping issue

#13 n00bsteam opened 2 years ago
10
Error validating XML

#12 n0rthl1ght closed 1 year ago
8
Logic conversion issues

#11 theflakes opened 2 years ago
4
Wrong Windows Defender mapping

#10 n00bsteam closed 2 years ago
12
not well-formed errors

#9 MidavSec closed 2 years ago
2
Not parsing field name correctly

#8 theflakes closed 3 years ago
2
More complex logic not parsing correctly

#7 theflakes closed 2 years ago
3
Keeping the same rule ID may be bugged

#6 theflakes closed 3 years ago
1
Add ability to specify if_sid per Sigma rule GUID.

#5 theflakes closed 3 years ago
1
Add ability to enable Wazuh email per Sigma GUID

#4 theflakes closed 3 years ago
1
New lexer broke some Sigma logic

#3 theflakes closed 3 years ago
1
No reason to honor startswith / endswith when forced to use full_log field

#2 theflakes closed 3 years ago
1
Create LICENSE

#1 theflakes closed 3 years ago
0