Alanv0303/Rule-converter ? reverse-engineered prompt

Build me a small Python tool that takes Sigma detection rules and converts them into Wazuh compatible XML rules.

I want it to be practical, not perfect, since Sigma and Wazuh do not map one to one. The output should give me a solid starting point that I can review and tweak by hand before using it in production. Please make sure the generated rules follow Wazuh friendly conventions and use custom rule IDs in the 100000 to 120000 range.

If it helps, feel free to look up current docs online for Sigma and Wazuh details while you build it. Keep the script simple and focused, with clear handling for common rule fields and sensible adjustments where the formats differ. I should be able to run it on a Sigma rule and get back usable XML without a lot of manual cleanup.