Sigma Hunting App v1.0.0.
The Sigma Hunting App for Splunk provides the following features:
- dynamically update of Sigma detection rules from a remote Git repository
- Store triggered detection rules in a dedicated index
- Enrichment of triggered detection rules with data from the Mitre ATT&CK Matrix
- Providing powerful dashboards for investigation: security posture, host investigator, APT investigator, lateral movement investigator
- Whitelist App to adapt the detection rules to your enviroment