Index

A

add_applied_processing_item() (sigma.rule.SigmaDetection method) add_pipeline_class() (sigma.processing.resolver.ProcessingPipelineResolver method) AddConditionTransformation (class in sigma.processing.transformations) AddFieldnamePrefixTransformation (class in sigma.processing.transformations)

AddFieldnameSuffixTransformation (class in sigma.processing.transformations) apply() (sigma.processing.pipeline.ProcessingItem method) (sigma.processing.pipeline.ProcessingPipeline method) apply_modifiers() (sigma.rule.SigmaDetectionItem method)

B

Backend (class in sigma.conversion.base)

C

ChangeLogsourceTransformation (class in sigma.processing.transformations) compare_precedence() (sigma.conversion.base.TextQueryBackend method) compile() (sigma.types.SigmaRegularExpression method) ConditionTransformation (class in sigma.processing.transformations) contains_placeholder() (sigma.types.SigmaString method) contains_special() (sigma.types.SigmaString method) convert() (sigma.conversion.base.Backend method) (sigma.types.SigmaString method) convert_condition() (sigma.conversion.base.Backend method) convert_condition_and() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_as_in_expression() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_field_compare_op_val() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_field_eq_expansion() (sigma.conversion.base.Backend method) convert_condition_field_eq_query_expr() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_field_eq_val() (sigma.conversion.base.Backend method) convert_condition_field_eq_val_bool() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_field_eq_val_cidr() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_field_eq_val_null() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method)

convert_condition_field_eq_val_num() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_field_eq_val_re() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_field_eq_val_re_contains() (sigma.conversion.base.TextQueryBackend method) convert_condition_field_eq_val_str() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_group() (sigma.conversion.base.TextQueryBackend method) convert_condition_not() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_or() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_query_expr() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_val() (sigma.conversion.base.Backend method) convert_condition_val_num() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_val_re() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_condition_val_str() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) convert_rule() (sigma.conversion.base.Backend method) convert_value_re() (sigma.conversion.base.TextQueryBackend method) convert_value_str() (sigma.conversion.base.TextQueryBackend method)

D

decide_convert_condition_as_in_expression() (sigma.conversion.base.Backend method) decide_string_quoting() (sigma.conversion.base.TextQueryBackend method) detection_item_condition_linking() (sigma.processing.pipeline.ProcessingItem method) DetectionItemFailureTransformation (class in sigma.processing.transformations)

DetectionItemProcessingCondition (class in sigma.processing.conditions) DetectionItemProcessingItemAppliedCondition (class in sigma.processing.conditions) DetectionItemTransformation (class in sigma.processing.transformations) disable_conversion_to_plain() (sigma.rule.SigmaDetectionItem method) DropDetectionItemTransformation (class in sigma.processing.transformations)

E

endswith() (sigma.types.SigmaString method) escape() (sigma.types.SigmaRegularExpression method)

escape_and_quote_field() (sigma.conversion.base.TextQueryBackend method) ExcludeFieldCondition (class in sigma.processing.conditions) expand() (sigma.types.SigmaCIDRExpression method)

F

FieldMappingTransformation (class in sigma.processing.transformations) finalize() (sigma.conversion.base.Backend method) finalize_output_default() (sigma.conversion.base.Backend method) finalize_query() (sigma.conversion.base.Backend method) (sigma.conversion.base.TextQueryBackend method) finalize_query_default() (sigma.conversion.base.Backend method) from_definition() (sigma.rule.SigmaDetection class method) from_dict() (sigma.processing.pipeline.ProcessingItem class method) (sigma.processing.pipeline.ProcessingPipeline class method) (sigma.rule.SigmaLogSource class method) (sigma.rule.SigmaRule class method)

from_dicts() (sigma.collection.SigmaCollection class method) from_mapping() (sigma.rule.SigmaDetectionItem class method) from_pipeline_list() (sigma.processing.resolver.ProcessingPipelineResolver class method) from_str() (sigma.rule.SigmaRuleTag class method) from_value() (sigma.rule.SigmaDetectionItem class method) from_yaml() (sigma.collection.SigmaCollection class method) (sigma.processing.pipeline.ProcessingPipeline class method) (sigma.rule.SigmaRule class method)

I

IncludeFieldCondition (class in sigma.processing.conditions)

insert_placeholders() (sigma.types.SigmaString method) is_keyword() (sigma.rule.SigmaDetectionItem method)

L

load_ruleset() (sigma.collection.SigmaCollection class method)

LogsourceCondition (class in sigma.processing.conditions)

M

match_detection_item() (sigma.processing.pipeline.ProcessingItem method)

MatchStringCondition (class in sigma.processing.conditions) merge() (sigma.collection.SigmaCollection class method)

P

postprocess() (sigma.rule.SigmaDetection method) (sigma.rule.SigmaDetectionItem method)

ProcessingItem (class in sigma.processing.pipeline) ProcessingPipeline (class in sigma.processing.pipeline) ProcessingPipelineResolver (class in sigma.processing.resolver)

Q

QueryExpressionPlaceholderTransformation (class in sigma.processing.transformations)

quote_string() (sigma.conversion.base.TextQueryBackend method)

R

replace_placeholders() (sigma.types.SigmaString method) replace_with_placeholder() (sigma.types.SigmaString method) ReplaceStringTransformation (class in sigma.processing.transformations) resolve() (sigma.processing.resolver.ProcessingPipelineResolver method) resolve_paths() (sigma.collection.SigmaCollection class method)

resolve_pipeline() (sigma.processing.resolver.ProcessingPipelineResolver method) rule_condition_linking() (sigma.processing.pipeline.ProcessingItem method) RuleContainsDetectionItemCondition (class in sigma.processing.conditions) RuleFailureTransformation (class in sigma.processing.transformations) RuleProcessingCondition (class in sigma.processing.conditions) RuleProcessingItemAppliedCondition (class in sigma.processing.conditions)

S

SigmaBool (class in sigma.types) SigmaCIDRExpression (class in sigma.types) SigmaCollection (class in sigma.collection) SigmaCompareExpression (class in sigma.types) SigmaCompareExpression.CompareOperators (class in sigma.types) SigmaDetection (class in sigma.rule) SigmaDetectionItem (class in sigma.rule) SigmaDetections (class in sigma.rule) SigmaLevel (class in sigma.rule)

SigmaLogSource (class in sigma.rule) SigmaNull (class in sigma.types) SigmaNumber (class in sigma.types) SigmaQueryExpression (class in sigma.types) SigmaRegularExpression (class in sigma.types) SigmaRule (class in sigma.rule) SigmaRuleTag (class in sigma.rule) SigmaStatus (class in sigma.rule) SigmaString (class in sigma.types) startswith() (sigma.types.SigmaString method)

T

TextQueryBackend (class in sigma.conversion.base) to_dict() (sigma.rule.SigmaRule method) to_plain() (sigma.rule.SigmaDetection method) (sigma.rule.SigmaDetectionItem method) (sigma.types.SigmaString method)

Transformation (class in sigma.processing.transformations)

V

value_linking (sigma.rule.SigmaDetectionItem attribute) ValueListPlaceholderTransformation (class in sigma.processing.transformations)

ValueProcessingCondition (class in sigma.processing.conditions) ValueTransformation (class in sigma.processing.transformations)

W

WildcardPlaceholderTransformation (class in sigma.processing.transformations)