Skip to content

Add Sigma Rule Id and description to results #68

Closed
Closed
Add Sigma Rule Id and description to results#68

Description

@jvmendezp
jvmendezp
opened on Mar 28, 2022

Hello, thanks a lot for this amazing product.

Currently, Chainsaw result includes the name of matched Sigma rule. Can you include Sigma rule ID and description too?

Sigma ID is not a mandatory field according to https://github.com/SigmaHQ/sigma/wiki/Specification, but it could be nice to know more information about the match from the Sigma rule specification.

Thanks!

Activity

  1. jvmendezp
    changed the title [-]Add Sigma Rule Id to results[/-] [+]Add Sigma Rule Id and description to results[/+] on Mar 28, 2022

  2. jvmendezp commented on Mar 28, 2022

    @jvmendezp
    jvmendezp
    on Mar 28, 2022
    Author

    Maybe we could set up what Sigma rule field should be in the response output using sigma-mapping.yml file

  3. alexkornitzer commented on Jun 2, 2022

    @alexkornitzer
    alexkornitzer
    on Jun 2, 2022
    Collaborator

    This is addressed in v2.0.0-alpha.0

  4. alexkornitzer
    closed this as completedon Jun 2, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions