Testing custom rules
Hi!
Thanks for your greate tool!
I want to test custom correlation rules with Zircolite, but I don't know how to do it... My idea is to create custom sqlite backend from my custom Sigma-like rules (but not classic sigma) and test it with logs in EVTX format. Is this possible at all? I can not find in pySigma how to create custom backend from custom correlation rules. Could you please help me to solve my problem?
关闭于 2025-03-23 0 条评论