{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"Parses and converts Sigma detection rules into queries for various security backends and log analysis platforms, replacing the legacy sigmac toolchain with a modular, vendor-agnostic design.","skillfed_tags":["sigma-rules","siem-conversion","threat-detection"],"use_cases":["Translate threat detection rules across multiple SIEM platforms from a single Sigma rule source.","Apply data model transformations to Sigma rules before backend conversion.","Build custom backends for proprietary or internal log analysis systems using the extension framework.","Validate and test Sigma rule syntax and logic before deploying to production systems.","Migrate detection logic from legacy sigmac toolchain to the modular pySigma architecture."],"what_it_does":"pySigma is a Python library that parses Sigma detection rules\u2014a vendor-neutral format for security detection logic\u2014and converts them into queries for specific security backends and log analysis platforms. It replaces the older sigmac tool with a cleaner, modular architecture where the core library remains slim and vendor-agnostic, while support for specific query languages and log data models is provided by separate backend and pipeline packages.\n\nThe library is designed for security engineers and threat hunters who need to translate detection rules across different SIEM and log analysis platforms without rewriting them for each system. It includes support for rule modifiers and processing pipelines. The project is actively maintained, supports Python 3.10 through 3.14, and has no known security vulnerabilities.","worth_installing":"Yes. pySigma is actively maintained, has low install friction, no security vulnerabilities, and fills a clear need for teams managing detection rules across multiple platforms. The copyleft license (LGPL-2.1-only) is standard for security tooling and poses no barrier for most use cases. Install it if you work with Sigma rules or need to convert detection logic across SIEM platforms."},"id":"pysigma","links":{"html":"https://skillfed.io/packages/pysigma","md":"https://skillfed.io/packages/pysigma.md","pypi":"https://pypi.org/project/pysigma/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-31","license_spdx":"LGPL-2.1-only","license_treatment":"copyleft","name":"pySigma","python_support":"supports_current","summary":"Sigma rule processing and conversion tools"},"popularity":{"monthly_downloads":465960,"position":6506,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.5.0"}