sigmalint

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #golang #android #rust #docker #macos #windows #awesome #awesome-list #openai #mcp

(★ 13)

A simple linter for Sigma rules

sigmalint Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# sigmalint

A simple linter for Sigma rules

## Description

sigmalint is a command line interface for validating Sigma rules against the Sigma schema.

The available arguments are:
* `--sigmainput` - Path to a directory that comtains Sigma files or to a single Sigma file.
* `--directory` - Flag for if sigmainput is a directory
* `--method` - The schema validator that you wish to use (Default: rx)

The available methods are:
* `rx` - uses PyRx and the Rx schema from the Sigma repo
* `jsonschema` - uses a jsonschema approximation of the Rx schema. This was done because jsonschema easily provides additional context as to why the rule is invalid, but this is an interpretation of the Rx schema and not official.
* `s2` - a modified version of the jsonschema schema that allows for more flexibilty in the detection section and marks all rules in the public sigma repo as valid

## Getting Started

### Installing

* pip install sigmalint

### Executing program

```
Usage: sigmalint [OPTIONS]

Options:
 --sigmainput PATH            Path to a directory that comtains Sigma files or to a single Sigma file.  
                               [required]
 --directory                  Flag for if sigmainput is a directory
 --method [rx|jsonschema|s2]  Validation method.
 --help                       Show this message and exit.
```

## Authors

Ryan Plas - ryan.plas@stage2sec.com

## Version History

* 0.1
    * Initial Release

sigmalint

sigmalint Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

sigmalint

sigmalint Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README