Expand description
sigma-rust is a library for parsing and checking Sigma rules against log events.
Structs§
- The
Eventstruct represents a log event. - The
Rulestruct implements the Sigma rule specification 2.0.0 released 08.08.2024.
Functions§
- Check if a rule matches an event
- Parse an event from a JSON string
- Parse a list of events from a JSON string
- Parse a rule from a YAML string