Skip to content

Commit

Permalink
imp
Browse files Browse the repository at this point in the history
  • Loading branch information
buixor committed Dec 9, 2024
1 parent 24a8417 commit e504da1
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,12 +18,14 @@ pip3 install sigma-cli

# Converting Crowdsec Rules

_note: `sigma` outputs everything in one file._
> By default, sigma appends everything into the same file. We want individual files with names that match the rule name.
```bash
for i in `find /path/to/sigma_core/rules/windows/process_creation/ -type f` ; do echo ${i} ; sigma convert -p crowdsec -t crowdsec ${i} > /path/to/$(basename ${i}) ; done
for i in `find ./rules/windows/process_creation/ -type f` ; do echo ${i} ; sigma convert -p crowdsec -t crowdsec ${i} > ./generated/$(basename ${i}) ; x=$(basename ${i%.*}); sed -i 's@name: sigmahq/.*@name: sigmahq/'${x}'@g' ./generated/$(basename ${i}) ; done
```



# Example output

```yaml
Expand Down

0 comments on commit e504da1

Please sign in to comment.