Sigmaiq

Latest version: v0.3.0

Safety actively analyzes 622229 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 2

0.3.0

With this release, we've added LLM / OpenAI functionality! Here's some of the highlights:
- Added an rule updater to download the latest SigmaHQ Rule release
- Added base LLM class to create embeddings from downloaded rules and store in a local VectorStore
- Added simple similarity searching for Sigma Rules in a VectorStore from user input
- Added a langchain Toolkit and Tools for use with a langchain Agent/bot to perform the following:
- Automatically convert a Sigma Rule to any SigmAIQ supported backend, pipeline, and output format via user input
- Automatically create brand new Sigma Rules based on a user's input and similar rules in the VectorStore

This is still very much a work in progress, but we are excited to share this with the community and keep working on its development.

For more information, please see the LLM specific README [here](https://github.com/AttackIQ/SigmAIQ/blob/master/sigmaiq/llm/README.md)

0.2.4

- Fixed improper pipeline creation when setting new pipeline in created SigmAIQBackend object

0.2.3

- Significantly improved the performance of `create_all_and_translate()` from `SigmAIQBackend`
- Added optional filter to exclude specific backends from `create_all_and_translate()`
- Added `black` to dev dependencies
- Added new util to automatically create a `SigmaRule` or `SigmaCollection` object from one of the following types:
- A SigmaRule or SigmaCollection (just returns the object)
- A `str` consisting of valid Sigma rule YAML
- A `dict` consisting of valid Sigma rule JSON
- A `list` containing any of the above types
- Formatted code base with `black`

0.2.2

Fixed pysigma-backend-qradar-aql pinned version causing errors

0.2.1

- Pinned `certifi` version to `2023.07.22` to fix [CVE-2023-37920](https://github.com/advisories/GHSA-xqr8-7jwr-rhp7/dependabot)

0.2.0

Not secure
New Backend
- Added support for the [Cortex XDR Backend](https://github.com/7RedViolin/pySigma-backend-cortexxdr)!

Updated Backend Versions
- Updated the following backends to the latest version
- pysigma-backend-carbonblack: v0.1.2 -> v0.1.4
- pysigma-backend-elasticsearch: v1.0.3 -> v1.0.5
- pysigma-backend-qradar-aql: v0.1.3 -> v0.1.4
- pysigma-backend-sentinelone: v0.1.1 -> v0.1.2

Bugfixes
- Fixed incorrect relative path of Splunk ES Correlation Search template
- Custom output format "stanza" now works as intended, and will generated a savedsearches.conf file for a correlation search based on the output of the Splunk backend and Sigma Rule description/tags.

Page 1 of 2

Links

Releases

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.