Intellectual Omnivore Trying to Become a Qubit·15h agoDetection-as-Code SIEM Pipeline with AI-Powered Security Alert TriageTurning raw security events into actionable intelligence using Wazuh, Sigma, Python, Groq AI, SQLite, and OpenSearch
InOSINT TeambyAshraf Gamal·Nov 6Automated SigmaHQ to Wazuh XML Rule ConversionField note: This article documents a focused conversion workflow and a Python prototype for a Wazuh 4.14.0 lab. It is not an official…
Ivett Kovács·Oct 21How to Write Good Instructions for Sigma AgentsIn Sigma, you can create agents on top of your data and add instructions that control how they answer. These instructions form the system…
Defa Mulya Pratama·Oct 6Your Detection Rules Are Code — So I Started Testing ThemHow I built a Sigma rule repo where every rule has attack and benign tests, maps to MITRE ATT&CK, and translates to Wazuh — all enforced in…
