Skip to content

Queries v2.0.0: Sigma to SPL Conversion馃殌

Latest

Choose a tag to compare

@mtnmunuklu mtnmunuklu released this 04 Feb 20:08

馃攧 Sigma to SPL (Splunk Processing Language) Query Conversion

  • Expanded Compatibility: The project now supports converting Sigma rules to SPL, enabling seamless integration with Splunk for security analysis.
  • Automated Rule Translation: Effortlessly translate Sigma rules into Splunk queries, saving time and ensuring consistency in security operations.

馃搨 Multi-Platform Query Management

  • The repository now includes both CSIEM and SPL queries, making it a centralized hub for managing detection rules across different SIEM platforms.
  • Organized directory structure for easy access and integration.

馃摎 Updated Documentation

  • Clear instructions on how to use and integrate SPL queries alongside CSIEM queries.
  • Enhanced guidelines for contributing and managing queries efficiently.

Queries v2.0.0

Now featuring Sigma to SPL query conversion, making it easier than ever to use Sigma rules in Splunk and CSIEM! 馃敟馃攳