LICENSE.LGPL.txt
LONG_DESCRIPTION.md
MANIFEST.in
README.md
setup.cfg
setup.py
config/ala-azure-activitylogs.yml
config/ala-azure-ad_auditlogs.yml
config/ala-azure-aws_cloudtrail.yml
config/ala-suricata.yml
config/ala.yml
config/arcsight-zeek.yml
config/arcsight.yml
config/carbon-black-eedr.yml
config/carbon-black.yml
config/chronicle.yml
config/crowdstrike.yml
config/devo-network.yml
config/devo-web.yml
config/devo-windows.yml
config/ecs-auditd.yml
config/ecs-azure-activitylogs.yml
config/ecs-azure-ad_auditlogs.yml
config/ecs-cloudtrail.yml
config/ecs-dns.yml
config/ecs-filebeat.yml
config/ecs-proxy.yml
config/ecs-suricata.yml
config/ecs-zeek-corelight.yml
config/ecs-zeek-elastic-beats-implementation.yml
config/elk-defaultindex-filebeat.yml
config/elk-defaultindex-logstash.yml
config/elk-defaultindex.yml
config/elk-linux.yml
config/elk-windows.yml
config/elk-winlogbeat-sp.yml
config/elk-winlogbeat.yml
config/filebeat-defaultindex.yml
config/fireeye-helix.yml
config/helk.yml
config/humio.yml
config/limacharlie.yml
config/logpoint-windows.yml
config/logrhythm_winevent.yml
config/logstash-defaultindex.yml
config/logstash-linux.yml
config/logstash-windows.yml
config/logstash-zeek-default-json.yml
config/netwitness-epl.yml
config/netwitness.yml
config/powershell-windows-all.yml
config/powershell.yml
config/qradar.yml
config/qualys.yml
config/splunk-windows-index.yml
config/splunk-windows.yml
config/splunk-zeek.yml
config/stix-custom.yml
config/stix-shifter.yml
config/stix2.0.yml
config/sumologic-cse.yml
config/sumologic.yml
config/thor.yml
config/winlogbeat-modules-enabled.yml
config/winlogbeat-old.yml
config/winlogbeat.yml
config/generic/sysmon.yml
config/generic/windows-audit.yml
sigma/__init__.py
sigma/configuration.py
sigma/filter.py
sigma/merge_sigma.py
sigma/output.py
sigma/sigma-similarity.py
sigma/sigma-uuid.py
sigma/sigma2attack.py
sigma/sigma2genericsigma.py
sigma/sigma2misp.py
sigma/sigma_similarity.py
sigma/sigma_uuid.py
sigma/sigmac.py
sigma/tools.py
sigma/backends/ala.py
sigma/backends/arcsight.py
sigma/backends/base.py
sigma/backends/carbonblack.py
sigma/backends/chronicle.py
sigma/backends/cim.py
sigma/backends/csharp.py
sigma/backends/data.py
sigma/backends/devo.py
sigma/backends/discovery.py
sigma/backends/ee-outliers.py
sigma/backends/elasticsearch.py
sigma/backends/exceptions.py
sigma/backends/fireeye-helix.py
sigma/backends/graylog.py
sigma/backends/humio.py
sigma/backends/limacharlie.py
sigma/backends/logiq.py
sigma/backends/logpoint.py
sigma/backends/mdatp.py
sigma/backends/misc.py
sigma/backends/mixins.py
sigma/backends/netwitness-epl.py
sigma/backends/netwitness.py
sigma/backends/powershell.py
sigma/backends/qradar.py
sigma/backends/qualys.py
sigma/backends/splunk.py
sigma/backends/splunkdm.py
sigma/backends/sql.py
sigma/backends/sqlite.py
sigma/backends/stix.py
sigma/backends/sumologic.py
sigma/backends/sysmon.py
sigma/backends/tools.py
sigma/backends/uberagent.py
sigma/config/collection.py
sigma/config/eventdict.py
sigma/config/exceptions.py
sigma/config/mapping.py
sigma/parser/base.py
sigma/parser/collection.py
sigma/parser/condition.py
sigma/parser/exceptions.py
sigma/parser/rule.py
sigma/parser/modifiers/__init__.py
sigma/parser/modifiers/base.py
sigma/parser/modifiers/discovery.py
sigma/parser/modifiers/exceptions.py
sigma/parser/modifiers/mixins.py
sigma/parser/modifiers/transform.py
sigma/parser/modifiers/type.py
sigmatools.egg-info/PKG-INFO
sigmatools.egg-info/SOURCES.txt
sigmatools.egg-info/dependency_links.txt
sigmatools.egg-info/entry_points.txt
sigmatools.egg-info/requires.txt
sigmatools.egg-info/top_level.txt
tests/test_backend_devo.py
tests/test_backend_elasticsearch.py
tests/test_backend_sql.py
tests/test_backend_sqlite.py
tests/test_parsing.py