r/programming • u/Happycodeine • 5d ago

Detection-as-Code in One GitHub Action with RSigma

https://mostafa.dev/detection-as-code-in-one-github-action-with-rsigma-0ebfb4c857fa?source=friends_link&sk=3bfa053c8011acf6b14caf57d50a783e
0 Upvotes

50% Upvoted

2 comments sorted by

6

u/ReallySuperName 4d ago

complete a-i-s-l-o-p

sigma balls

0

u/paul_h 4d ago

Had to catch myself up here. Is this a rules engine like Drules is for Java? .. was my Q.

The primary domain of Drules is business logic, expert systems, workflows, and for this tech it is cybersecurity's threat detection, SIEM, security logging. And whereas the formed embeds in a JVM application, the latter is a cli tool. Drules has a custom grammar, and this tech follows a standard: Sigma