Sigma2KQL
Vulnerability ScanningA repository of all SIGMA rules converted to KQL that runs on a weekly schedule to update the repository and align with the up to date version of the SIGMA rules repository.
Features
- Converts Sigma security queries into Kusto Query Language (KQL) for use in Azure Defender and Sentinel
- Automates bulk conversion of large rule sets with reporting on successes and failures
- Provides a helper script that reads a Sigma repository directory and writes organized KQL output folders
Recent releases
View all 2 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
pip
