sigma-hunting

What problem does it solve?

This Skill automates the process of applying threat detection rules (Sigma) against log data, making it easier to identify malicious activity without manually writing complex queries for different systems.

Core Features & Use Cases

• Automated Threat Hunting: Applies Sigma rules to log sources to detect threats.
• Multi-Backend Support: Converts rules for Elasticsearch, Splunk, and grep.
• Use Case: Automatically hunt for signs of a specific malware family (e.g., T1059) across your Linux system logs using pre-defined or custom Sigma rules.

Quick Start

Run a threat hunt using the sigma hunting skill against local log sources.