theflakes/sigma_to_wazuh

Issues

• Issue with Or Translation with negate=Yes regex

  #20 opened 6 months ago by CyberOverflow
  2

• Script does not work

  #19 opened a year ago by irfaanaikagjee
  4

• Wazuh Manager crashes when importing sigma.xml

  #18 opened a year ago by qdsmm
  4

• Some Rules Duplicated

  #14 opened a year ago by n00bsteam
  4

• Logic conversion issues

  #11 opened 2 years ago by theflakes
  4

• Verify Sigma to Wazuh field name mappings

  #16 opened 2 years ago by theflakes
  0

• Error validating XML

  #12 opened 2 years ago by n0rthl1ght
  8

• Problem with "

  #15 opened 2 years ago by n0rthl1ght
  2

• Rule mapping issue

  #13 opened 2 years ago by n00bsteam
  10

• More complex logic not parsing correctly

  #7 opened 2 years ago by theflakes
  3

• not well-formed errors

  #9 opened 2 years ago by MidavSec
  2

• Wrong Windows Defender mapping

  #10 opened 2 years ago by n00bsteam
  12

• Not parsing field name correctly

  #8 opened 3 years ago by theflakes
  2

• Keeping the same rule ID may be bugged

  #6 opened 3 years ago by theflakes
  1

• Add ability to enable Wazuh email per Sigma GUID

  #4 opened 3 years ago by theflakes
  1

• Add ability to specify if_sid per Sigma rule GUID.

  #5 opened 3 years ago by theflakes
  1

• No reason to honor startswith / endswith when forced to use full_log field

  #2 opened 3 years ago by theflakes
  1

• New lexer broke some Sigma logic

  #3 opened 3 years ago by theflakes
  1