Sigma Python Packages

pysigma-backend-loki

pySigma backend for generating Grafana Loki/LogQL rules

pysigma-backend-netwitness

pySigma NetWitness backend

tenzir

Tenzir is the data pipeline engine for security teams.

detect-droid

A pySigma wrapper to manage detection rules.

pysigma-backend-uberagent

uberAgent backend for the Sigma rule converter.

azuma

Yet another Sigma library for Python

sigmalint-cli

ESLint-style linter for Sigma detection rules. Validates against Sigma 2.1.0, scores rules across six quality dimensions, emits stable rule IDs.

pyvast

Tenzir is the data pipeline engine for security teams.

bedrock-keys-security

Detect phantom IAM users, decode leaked AWS Bedrock and Claude Platform API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rules.

pysigma-backend-sumologic

pySigma backend for Sumo Logic Cloud SIEM rule conversion

automathon

A Python library for simulating and visualizing finite automata

emsigma

spectral interpretation using gaussian mixtures and autoencoder

lyrebird-emulator

Modern async-first internet-services emulation suite for malware-analysis labs — a defensive INetSim successor with detection telemetry (paired Sigma rules + analytics) as a first-class output.

pytenzir

Tenzir is the data pipeline engine for security teams.

sigma-rule-matcher

Python tool for evaluating Sigma rules against events

pysigma-backend-victorialogs

pySigma VictoriaLogs (LogsQL) backend