SIGMAA_Module.rar: Contains the entire SIGMAA module, including attack samples and Sigma rule samples.SIGMAA_Module_WA.rar: Consists of the SIGMAA module without attack samples, but still includes Sigma rule samples.SIGMAA_Module_WAR.rar: Contains only the SIGMAA module without attack samples and Sigma rule samples.
Do note that the installation of this module will be flagged by Antiviruses since some strings in the provided sample rules detect malicious attacks. This is the same with the Zircolite executable.