Thomas Patzke
@blubbfiction
Followers
5K
Following
2K
Media
161
Statuses
7K
Incident Response, Threat Hunting. Opensource security tool developer (https://t.co/2twMtVpZtL). Moved to @[email protected]
Germany
Joined October 2009
New post in the SigmaHQ blog: Introducing Sigma Correlations.
0
5
27
RT @DefensiveDepth: Check out my newly updated @sigma_hq course - Refreshed content to include all the great changes happening with the Sig….
0
6
0
RT @nas_bench: 2023 has been a very busy year for the @sigma_hq team and a great year for the Sigma community at large. We've seen a great….
0
22
0
RT @nas_bench: A new update has just dropped to the VsCode @sigma_hq extension 🚀. My colleague @_humpalum graciously integrated sigconverte….
0
28
0
RT @nas_bench: [PySigma Basics Tips 🌟]. If you leverage Sigma rules, you're probably aware that fields are vendor agnostic. Which means we….
0
6
0
RT @nas_bench: .@m3nixx and I took some time this weekend to cook something cool for Sigconverter 🧑🍳 You can now a….
0
24
0
RT @andriinb: We have just open sourced and brought it back to original .Thank you everyone….
0
35
0
RT @4ndur1n: Elasticsearch keyword searches are fast and fine but misses case-insensitive searches. Event-Query-Language (EQL) sounds like….
0
10
0
New blog post about the the Sigma converter feature that allows to create custom output formats just by writing some YAML definition and templates:. Introducing Query Post-Processing and Output Finalization to Processing Pipelines.
0
24
76
RT @nas_bench: PySigma templating feature is a game changer for backends output! A blog describing the feature is coming soon by @blubbfict….
0
7
0
RT @frack113: Hi everyone, to get the weekend well started an Elastalert working conversion thanks to the template ouput in the latest ver….
0
5
0
RT @_josehelps: 🎉 Introducing SigConverter! 🎉. We're thrilled to announce the launch of a respectful-of-privacy an….
0
86
0
RT @alexanderjaeger: 🕶️🧐👀🥷🥁A new project by the Security Response team of @Google: It fills a gap I have seen for….
0
92
0
This will be integrated into the next version of Sigma CLI. I also plan a blog post about it in our Medium publication:. 4/4.
0
0
0
It also allows to put further query parts before and after the generated query, which was requested several times. Further use cases could be direct ingestion of generated queries into the SIEM directly from the conversion process and surely much more. 3/4.
1
0
1
In the new release processing pipelines were extended by query post-processing and output finalization. This allows to create custom output formats out of queries generated by backends by embedding them into templates (Jinja2 is supported!). 2/4.
1
0
0
Just released pySigma 0.10:. It contains lots of extensions and fixes provided by the steadily growing community of pySigma contributors! Thanks to everyone of you!. 1/4🧵.
1
20
46
New blog post: Connecting Sigma Rule Sets to your Environment with Processing Pipelines. If you convert Sigma rules into queries you should read this, especially if you never heard about processing pipelines before.
0
19
28
Just published my first post in the Sigma blog:. Building Flexible & Reusable Detections with Sigma Placeholders.
0
14
35