AcademyMCP serversDevelopment

RSigma

Security and detection engineering teams that write and maintain Sigma rules and want to check them against log events from an AI assistant.

  • Recommendedour rating
  • 165gitHub stars
  • MITlicence
  • 2 days agolast update
git clone https://github.com/timescale/rsigma.git
README.md

Loading the file...

What it does

An MCP server for working with Sigma detection rules. It can author, lint, validate and convert rules, evaluate and explain detections against log events, and inspect correlation state. It is part of the RSigma detection engineering toolkit.

Use cases

  1. 01Lint and validate a new Sigma rule
  2. 02Convert a Sigma rule to another query format
  3. 03Test why a rule did or did not match a log event

Questions about
RSigma.

What is RSigma used for?

Security and detection engineering teams that write and maintain Sigma rules and want to check them against log events from an AI assistant. An MCP server for working with Sigma detection rules. It can author, lint, validate and convert rules, evaluate and explain detections against log events, and inspect correlation state. It is part of the RSigma detection engineering toolkit.

How do I install RSigma?

Run this in your terminal: git clone https://github.com/timescale/rsigma.git

Is RSigma open source?

Yes. The code is on GitHub (timescale/rsigma) under the MIT licence.

Is RSigma safe to use?

It passed our automatic scan for credential theft, hidden instructions and risky install commands. Third party open source software. Sabemos AI does not maintain it. Check the code and permissions before you connect it to company data.