Ruleset translation for Wazuh

[n0rthl1ght]

Hello everyone!
Can you add ruleset translation for Wazuh? Now I'm using another script to convert sigma rules to Wazuh xml ruleset and it's painful :(

[L1ghtn1ng]

This would be awesome to have if this can get looked at

[phantinuss]

@thomaspatzke: Can you migrate this over to pySigma? I seem to be missing permission to do so.

@Thread: This is the repo for Sigma rules. The sigmac converter will be end of life with the end of this year. Therefore don't expect anything be done for it. Someone would need to create a backend for pySigma which is the successor of sigmac.

[thomaspatzke]

I move it to the plugin directory repository, where backend requests are collected.

[frack113]

I have works with OSSEC , I do not think you can create a backend to convert Sigma to the OSSEC/Wazuh.
Sigmac did not have one either.

[thomaspatzke]

Worked with Wazuh in the past and there's indeed a rule language that could be feeded by Sigma rules, at least by a subset.