WRG-11/wrg-sigma-rules

Sigma rules for ransomware, threat actors and vulnerabilities disclosed in AI/LLM apps and MCP servers, with multi-backend conversion and an MCP server for Claude Code, Codex and Cursor. CI-pinned claims.

2Stars on the repository
5Mods indexed here, across every type
2d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

wrg-sigma-rules

01

WRG-11/wrg-sigma-rules

Plugin Claude Code

Bundles 3 skills, 1 MCP server · 74 tokens together

Sigma detection rule writing, validation, and conversion for SOC analysts and threat-intel teams. LLM-assisted draft + pySigma validation + multi-backend conversion (Splunk, Elastic, OpenSearch; Wazuh through the Elastic Lucene backend) with logsource-aware processing pipelines. Ships a 294-rule published corpus…

not rated 2 changed 23d ago A tokens not measured original MIT