Skip to content

Replace sigma-rust crate with sigmars? #52

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
YamatoSecurity opened this issue Apr 20, 2025 · 0 comments
Open

Replace sigma-rust crate with sigmars? #52

YamatoSecurity opened this issue Apr 20, 2025 · 0 comments
Assignees
@fukusuket
Labels
enhancement New feature or request high priority under investigation

Comments

@YamatoSecurity
Copy link
Contributor

Many detections for cloud logs will rely on correlation rules. Also, the current sigma-rust crate seems to only support sigma v1 field modifiers so we should investigate whether we can use https://crates.io/crates/sigmars/0.2.0 instead which is supposed to support all sigma v2 modifiers as well as correlations.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@fukusuket fukusuket

Labels
enhancement New feature or request high priority under investigation
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

chg: replace sigma-rust to sigmars Yamato-Security/suzaku
2 participants
@fukusuket @YamatoSecurity