wagga40 / Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

SigmaHQ / pySigma

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)