Sigma Hunting App v1.1.0

Release notes:

• Sigma Hunting App Whitelist was removed because it is easier that this app is created by the user itself.
• New Version of Sigma2SplunkAlert is updated
• Available as spl and folder

Sigma Hunting App v1.0.0.

The Sigma Hunting App for Splunk provides the following features:

• dynamically update of Sigma detection rules from a remote Git repository
• Store triggered detection rules in a dedicated index
• Enrichment of triggered detection rules with data from the Mitre ATT&CK Matrix
• Providing powerful dashboards for investigation: security posture, host investigator, APT investigator, lateral movement investigator
• Whitelist App to adapt the detection rules to your enviroment