Skip to content

Sigma2KQL

v2025_11_1_Sigma2KQL Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 6mo Vulnerability Scanning
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

detection-engineering kql microsoftsentinel mitre-attack threat-detection threat-hunting

Summary

AI summary

Added documentation on usage.

Full changelog

First release:
I've made various additions to the project to improve it from the original repository. This includes:

A more robust Python script for conversions with better error handling.
Utilising the newest Kusto backend from pySigma.
requirements.txt.
Inclusion of emerging-threats and threat-hunting rules rather then just the main rules repository.
Documentation on usage.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Sigma2KQL

Get notified when new releases ship.

Sign up free

About Sigma2KQL

A repository of all SIGMA rules converted to KQL that runs on a weekly schedule to update the repository and align with the up to date version of the SIGMA rules repository.

All releases →

Related context

Beta — feedback welcome: [email protected]