SigmaHQ/pySigma — reverse-engineered prompt
Reverse engineered prompt
Build me a Python library called pySigma that can read Sigma detection rules, parse them cleanly, and convert them into query formats through pluggable backends.
I want the core package to stay slim and vendor agnostic, with the actual target query languages and log model transformations handled by separate backend and pipeline extensions. Please make it work on Python 3.10 and newer, include solid pytest coverage, and write clear docs with a few simple examples so someone can install it and start converting rules quickly.
The overall feel should be like a modern replacement for the older Sigma conversion toolchain, but with a much cleaner design and easy extension points for people who want to add their own backend later. If it makes sense, include support for listing available modifiers or plugins at the library level, but keep the focus on the parsing and conversion core. Look up current Sigma docs online if you need to.
Want more depth? Deep Reverse