Skip to content

Add pySigma-backend-sumologic backend - #56

Merged
thomaspatzke merged 2 commits into
SigmaHQ:mainfrom
jc-sumo:main
Jun 14, 2026
Merged

thomaspatzke merged 2 commits into
SigmaHQ:mainfrom
jc-sumo:main

Conversation

@jc-sumo

@jc-sumo jc-sumo commented Jun 2, 2026

Copy link
Copy Markdown
Contributor

Add pySigma-backend-sumologic backend

Features

  • Converts Sigma rules to complete CSE rule JSON (ready for API import)
  • Field mappings for 70+ log sources (Windows, AWS, Azure, GCP, Cisco, Palo Alto, etc.)
  • Automatic entity selector assignment per log source category
  • MITRE ATT&CK tag mapping
  • Confidence scoring for mapping quality validation

@jc-sumo
jc-sumo marked this pull request as draft June 2, 2026 22:07
@jc-sumo
jc-sumo marked this pull request as ready for review June 2, 2026 22:09
@thomaspatzke
thomaspatzke merged commit 6af42a8 into SigmaHQ:main Jun 14, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants