Add create_sigma_rules Pattern

Open bobby-tablez opened this issue 1 year ago • 3 comments

What this Pull Request (PR) does

Add a pattern which takes a cybersecurity related publication and extracts TTP indicators in the form of Sigma rules. https://github.com/SigmaHQ/sigma

Related issues

none

Screenshots

none

Jun 11 '24 19:06 bobby-tablez

Potentially supplying a better name for the PR will help with review.

Jun 11 '24 20:06 brianredbeard

@bobby-tablez using what models you tested it? Thx

Jun 13 '24 13:06 dorinvlas

Tested using gpt-3.5, gpt4, gpt4o

Jun 13 '24 19:06 bobby-tablez