Expand description
sigma-rust
is a library for parsing and checking Sigma rules against log events.
Structs§
- The
Event
struct represents a log event. - The
Rule
struct implements the Sigma rule specification 2.0.0 released 08.08.2024.
Functions§
- Check if a rule matches an event
- Parse an event from a JSON string
- Parse a list of events from a JSON string
- Parse a rule from a YAML string