This is the SurrealQL backend for pySigma. It provides the package sigma.backends.surrealql with the SurrealQLBackend class.
This backend translates Sigma Rules into SurrealQL syntax to execute queries in SurrealDB. It was developed using the features provided by SurrealDB version 2.0.
It supports the following output formats:
- default: plain SurrealQL queries
This project is currently maintained by:
- This issue
- In the future,
ANDorORlists could be converted into theINoperator, but this is not a priority for now - In SurrealDB, it is necessary to create a specific index beforehand for full-text search functionality