CLI for parsing, validating, linting and evaluating Sigma detection rules
Sigma rule conversion engine — convert rules to backend-native query strings
Evaluator for Sigma detection and correlation rules — match rules against events
Language Server Protocol (LSP) server for Sigma detection and correlation rules
Streaming runtime for rsigma — event sources, sinks, and log processing pipeline
Parser for Sigma detection rules, correlations, and filters