Sigma Rules Python Packages

pysigma-backend-uberagent

uberAgent backend for the Sigma rule converter.

contrastapi

MCP server with 53 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.

threatlens-cli

Offline log analysis and threat hunting CLI. Parses EVTX, JSON, Syslog, and CEF logs, runs Sigma rules, detects multi-stage attacks, and produces alerts mapped to MITRE ATT&CK.

pyatr

Open detection standard -- like Sigma, but for AI agents. 425 rules, shipped in Microsoft AGT, Cisco AI Defense, MISP, OWASP A-S-R-H. 97.1% recall on NVIDIA garak. NIST OSCAL Path 1.

mitre-attackctl

A fast, batteries-included CLI companion for MITRE ATT&CK® TTPs.