Sigmacatch¶
Headless tool that captures real Windows events via the Windows Event Log API (winevt), matches them against SigmaHQ rules, and outputs structured regression data ready for SigmaHQ PRs.
Quick start¶
Documentation¶
A built version of this documentation is published to GitHub Pages: https://frack113.github.io/sigmacatch/
| English | Francais | |
|---|---|---|
| Architecture | EN | FR |
| Architecture reference | EN | FR |
| Build | EN | FR |
| Output format | EN | FR |
| Regression data format | EN | FR |
| Nice-to-have | EN | FR |
License¶
MIT