Security Automation

go-suricataGo

A Go client library for interacting with Suricata's Unix socket to execute commands and retrieve data.

MassDeploySuricataShell

Ansible-based automation for mass deployment and updates of Suricata intrusion detection and prevention systems.

TerraSigmaHCL

Automates conversion of Sigma rules to Terraform and Sentinel YAML for detection engineering in Microsoft Sentinel.

Sigma2KQLPython

Automatically converts Sigma detection rules to Kusto Query Language (KQL) for Microsoft Defender and Sentinel.