[{"data":1,"prerenderedAt":314},["ShallowReactive",2],{"repo-timescale-rsigma":3,"i18n-timescale-rsigma-zh-CN":311},{"mirrorPool":4,"detail":13},[5,9],{"key":6,"label":7,"base":8,"type":6},"github","mirror.github","https:\u002F\u002Fgithub.com\u002F",{"key":10,"label":11,"base":12,"type":10},"auto-proxy","mirror.autoProxy","https:\u002F\u002Fgithub.xxlab.tech\u002F",{"owner":14,"repo":15,"repoId":16,"repoUrl":17,"starCount":18,"language":19,"description":20,"languages":21,"screenshots":27,"homepage":28,"pushedAt":29,"ownerAvatar":30,"ownerName":31,"ownerBio":32,"lastSyncTime":33,"lastReleaseTime":34,"tags":35,"license":53,"category":54,"subgroup":55,"releases":56},"timescale","rsigma",1154854390,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma",147,"Rust","A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers :crab:",{"Rust":22,"Python":23,"Shell":24,"PLpgSQL":25,"Mermaid":25,"TypeScript":26,"Dockerfile":26,"JavaScript":26},98.6,0.7,0.5,0.1,0,[],"https:\u002F\u002Frsigma.io\u002F","2026-09-28","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F8986001?v=4","Tiger Data","","2026-09-28T15:15:56.105850+00:00","2026-09-10T11:17:56Z",[36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52],"backend","converter","correlation","detection","fibratus","linter","lsp","lynxdb","mcp","parser","postgres","runtime","rust","siem","sigma","stream-processing","timescaledb","MIT","tools","MCP连接器\u002F工具",[57,97,130,160,191,222,253,281],{"tag":58,"publishAt":34,"semVer":59,"prerelease":61,"assets":62},"v0.22.0",[26,60,26],22,false,[63,69,75,81,86,91],{"fileName":64,"sizeMb":65,"sha256":66,"downloadCount":67,"originUrl":68},"rsigma-aarch64-apple-darwin.tar.gz",17.07,"6bf5fc987dad700ce3d8e310567a2042c209f1d66dd0bc6ff5146dc742ed5116",7,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.22.0\u002Frsigma-aarch64-apple-darwin.tar.gz",{"fileName":70,"sizeMb":71,"sha256":72,"downloadCount":73,"originUrl":74},"rsigma-aarch64-pc-windows-msvc.zip",17.29,"df9889fbe86c8568c75266656b282e6a1f6dc109f4a2a9853cdc0cd4c354a856",2,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.22.0\u002Frsigma-aarch64-pc-windows-msvc.zip",{"fileName":76,"sizeMb":77,"sha256":78,"downloadCount":79,"originUrl":80},"rsigma-aarch64-unknown-linux-gnu.tar.gz",17.59,"b0aea41c0656df96d4b5d8c975cc28a6d1ba4e6d8776f8d2ad57cf5d521b8e10",6,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.22.0\u002Frsigma-aarch64-unknown-linux-gnu.tar.gz",{"fileName":82,"sizeMb":83,"sha256":84,"downloadCount":73,"originUrl":85},"rsigma-x86_64-apple-darwin.tar.gz",18.43,"530e0650e088e2160578d6cfabe94dbd665aaa5cd40b0765ce8414e4819dfbeb","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.22.0\u002Frsigma-x86_64-apple-darwin.tar.gz",{"fileName":87,"sizeMb":88,"sha256":89,"downloadCount":79,"originUrl":90},"rsigma-x86_64-pc-windows-msvc.zip",18.71,"2c752970c8c1d6c129ce63100566f5ac6ff19b1efaf8471edfcfacdd514ca3e1","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.22.0\u002Frsigma-x86_64-pc-windows-msvc.zip",{"fileName":92,"sizeMb":93,"sha256":94,"downloadCount":95,"originUrl":96},"rsigma-x86_64-unknown-linux-gnu.tar.gz",18.97,"221c29a8d64688f5a2898655446df2a14334e3a515d03d95aa577b273148586b",63,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.22.0\u002Frsigma-x86_64-unknown-linux-gnu.tar.gz",{"tag":98,"publishAt":99,"semVer":100,"prerelease":61,"assets":102},"v0.21.0","2026-08-05T14:26:53Z",[26,101,26],21,[103,108,112,117,121,125],{"fileName":64,"sizeMb":104,"sha256":105,"downloadCount":106,"originUrl":107},16.16,"0c64ffcdb45ce4dbed646d18053e57708927bbc4561af600793f5b933c15508e",13,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.21.0\u002Frsigma-aarch64-apple-darwin.tar.gz",{"fileName":70,"sizeMb":109,"sha256":110,"downloadCount":79,"originUrl":111},16.34,"6174e024f33b04fce5c3d7de3f5a6d99eb89185dc7ba5574d22a01a4a4e6bdba","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.21.0\u002Frsigma-aarch64-pc-windows-msvc.zip",{"fileName":76,"sizeMb":113,"sha256":114,"downloadCount":115,"originUrl":116},16.68,"69f60cbcb125b64e85094fe749652229227f04d0e9320d5a863b7d1893b1b8b4",5,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.21.0\u002Frsigma-aarch64-unknown-linux-gnu.tar.gz",{"fileName":82,"sizeMb":118,"sha256":119,"downloadCount":79,"originUrl":120},17.48,"a185f675a83392da85022182f4cafd8f97b766970051e755d8b85aaa28114acf","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.21.0\u002Frsigma-x86_64-apple-darwin.tar.gz",{"fileName":87,"sizeMb":122,"sha256":123,"downloadCount":101,"originUrl":124},17.67,"e5db02e95e102d59c051dea5db02afc84fa2f9dda5eceef82ea92b48c1be7bb5","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.21.0\u002Frsigma-x86_64-pc-windows-msvc.zip",{"fileName":92,"sizeMb":126,"sha256":127,"downloadCount":128,"originUrl":129},17.99,"cfb1ecc3994bf24decacd004c06dec0db29602f57d23e01d8ff3cf05fa5e04e4",507,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.21.0\u002Frsigma-x86_64-unknown-linux-gnu.tar.gz",{"tag":131,"publishAt":132,"semVer":133,"prerelease":61,"assets":135},"v0.20.0","2026-07-22T13:03:52Z",[26,134,26],20,[136,140,145,148,152,155],{"fileName":64,"sizeMb":137,"sha256":138,"downloadCount":67,"originUrl":139},15.83,"1753c5559ffe6ffecbfb7f2919814999c519981bb2d5eb04c5ed17e6bdc72e24","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.20.0\u002Frsigma-aarch64-apple-darwin.tar.gz",{"fileName":70,"sizeMb":141,"sha256":142,"downloadCount":143,"originUrl":144},16,"2fbd35af1bf8aea5427545a25107656ae75392e2e67b735a2c0aa7e5e46e42cb",4,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.20.0\u002Frsigma-aarch64-pc-windows-msvc.zip",{"fileName":76,"sizeMb":109,"sha256":146,"downloadCount":115,"originUrl":147},"6968da4d7b34d7be6a2d315b782e2d12f022afc92633d95073429a9d2512dc88","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.20.0\u002Frsigma-aarch64-unknown-linux-gnu.tar.gz",{"fileName":82,"sizeMb":149,"sha256":150,"downloadCount":143,"originUrl":151},17.12,"c2837c28ca64675984a3cd4bbc87de5fc85cb9b7f7dbee61d112476b2ed9129e","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.20.0\u002Frsigma-x86_64-apple-darwin.tar.gz",{"fileName":87,"sizeMb":71,"sha256":153,"downloadCount":79,"originUrl":154},"f99861b427890550a4563ac587bbe4f70963783be3bf1d77f10e98cb85689a40","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.20.0\u002Frsigma-x86_64-pc-windows-msvc.zip",{"fileName":92,"sizeMb":156,"sha256":157,"downloadCount":158,"originUrl":159},17.62,"0e25e958fc63acebf4adf0fb4c8c73ed8e1e9dcdebd2de9298b28c92ca9fc3bf",8,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.20.0\u002Frsigma-x86_64-unknown-linux-gnu.tar.gz",{"tag":161,"publishAt":162,"semVer":163,"prerelease":61,"assets":165},"v0.19.0","2026-07-13T08:18:37Z",[26,164,26],19,[166,170,174,178,182,186],{"fileName":64,"sizeMb":167,"sha256":168,"downloadCount":143,"originUrl":169},15.51,"211d09762838e90f869be666063e6660ace2c46c0bc567db7f7f067feef7fd14","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.19.0\u002Frsigma-aarch64-apple-darwin.tar.gz",{"fileName":70,"sizeMb":171,"sha256":172,"downloadCount":79,"originUrl":173},15.68,"2f26379ed66ec1806948f7518cd78af3f5bda14190e9fd00c3598ac69bc0708c","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.19.0\u002Frsigma-aarch64-pc-windows-msvc.zip",{"fileName":76,"sizeMb":175,"sha256":176,"downloadCount":79,"originUrl":177},16.01,"ec5c30510670b54656383ad6dee6218e6fedeb38b592c774db48e8af58ff5eeb","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.19.0\u002Frsigma-aarch64-unknown-linux-gnu.tar.gz",{"fileName":82,"sizeMb":179,"sha256":180,"downloadCount":143,"originUrl":181},16.76,"cc50111b81ee7d37c224478a698e11d5c04da44a24e32c850b4fa8bb98a4d985","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.19.0\u002Frsigma-x86_64-apple-darwin.tar.gz",{"fileName":87,"sizeMb":183,"sha256":184,"downloadCount":79,"originUrl":185},16.93,"b44515d7379a8ac2cf2c45febf63dc3d60edc7ff4a59ceff6fc0620c47e24e2f","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.19.0\u002Frsigma-x86_64-pc-windows-msvc.zip",{"fileName":92,"sizeMb":187,"sha256":188,"downloadCount":189,"originUrl":190},17.27,"89ead9c0931763373168ab5fabb48fcad480ca71f03f01f7702d4bf4a7011eb0",11,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.19.0\u002Frsigma-x86_64-unknown-linux-gnu.tar.gz",{"tag":192,"publishAt":193,"semVer":194,"prerelease":61,"assets":196},"v0.18.0","2026-07-01T10:29:37Z",[26,195,26],18,[197,201,205,209,213,217],{"fileName":64,"sizeMb":198,"sha256":199,"downloadCount":67,"originUrl":200},15.31,"a19c8626c69a026c396d1985c2895cafaf08ccfba34cdf6108591c783121874c","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.18.0\u002Frsigma-aarch64-apple-darwin.tar.gz",{"fileName":70,"sizeMb":202,"sha256":203,"downloadCount":79,"originUrl":204},15.41,"80bc9a8d56b5d19675ac8e83ef6b1347b9ca1fa813616ffed6f95ce1c4035426","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.18.0\u002Frsigma-aarch64-pc-windows-msvc.zip",{"fileName":76,"sizeMb":206,"sha256":207,"downloadCount":158,"originUrl":208},15.74,"88c47587fa852c003ce6b8c5eef8b65d8faf6f50c0e77b66bd91416341fcda11","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.18.0\u002Frsigma-aarch64-unknown-linux-gnu.tar.gz",{"fileName":82,"sizeMb":210,"sha256":211,"downloadCount":67,"originUrl":212},16.5,"3e08b13e34182ec9f14a474b23f707b3e864c14010824c95d4df7faf4569ed72","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.18.0\u002Frsigma-x86_64-apple-darwin.tar.gz",{"fileName":87,"sizeMb":214,"sha256":215,"downloadCount":67,"originUrl":216},16.53,"d374282d33ddddc9dcf16acd89a09bd3db89609f8602b6369bdd3da94f49beba","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.18.0\u002Frsigma-x86_64-pc-windows-msvc.zip",{"fileName":92,"sizeMb":218,"sha256":219,"downloadCount":220,"originUrl":221},16.94,"f4caab181846b45ebc6bca5e81fe71c7d0e18e30e70cb58b0659be8b691119fd",68,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.18.0\u002Frsigma-x86_64-unknown-linux-gnu.tar.gz",{"tag":223,"publishAt":224,"semVer":225,"prerelease":61,"assets":227},"v0.17.0","2026-06-23T10:23:43Z",[26,226,26],17,[228,232,236,240,244,248],{"fileName":64,"sizeMb":229,"sha256":230,"downloadCount":67,"originUrl":231},14.46,"842b71cef1bf4016830c672fb24858061bc77a9e1eaf17b5af7affcc9287d1e6","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.17.0\u002Frsigma-aarch64-apple-darwin.tar.gz",{"fileName":70,"sizeMb":233,"sha256":234,"downloadCount":143,"originUrl":235},14.53,"13dd8fa0fb422bb99df4c082b481629671b7a7c5741c5b9e2918d0e04848d4da","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.17.0\u002Frsigma-aarch64-pc-windows-msvc.zip",{"fileName":76,"sizeMb":237,"sha256":238,"downloadCount":143,"originUrl":239},14.86,"54135d175bd7deea96b8e9ee2c9b0f743244b1e8df7317ca41437b27dfc9ac33","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.17.0\u002Frsigma-aarch64-unknown-linux-gnu.tar.gz",{"fileName":82,"sizeMb":241,"sha256":242,"downloadCount":143,"originUrl":243},15.54,"71cbd7d7a98e1b10514a81ae28b57eecef5a800f4b22408bdec27747ebc1c829","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.17.0\u002Frsigma-x86_64-apple-darwin.tar.gz",{"fileName":87,"sizeMb":245,"sha256":246,"downloadCount":67,"originUrl":247},15.57,"f79fc5f9843e14fe02434eaf3eae15ec2727bae7b06c96b44f02cf12315b1ba7","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.17.0\u002Frsigma-x86_64-pc-windows-msvc.zip",{"fileName":92,"sizeMb":249,"sha256":250,"downloadCount":251,"originUrl":252},15.97,"8c3d01066afd46794be22800ff642bd4b8149ef430ebe8a6d799753a26329f4f",10,"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.17.0\u002Frsigma-x86_64-unknown-linux-gnu.tar.gz",{"tag":254,"publishAt":255,"semVer":256,"prerelease":61,"assets":257},"v0.16.0","2026-06-15T08:27:51Z",[26,141,26],[258,262,265,269,273,277],{"fileName":64,"sizeMb":259,"sha256":260,"downloadCount":143,"originUrl":261},13.63,"4c35d1ecdcd463e14a61a68a6a8b921f0b0be9c8e6d2d930238447ebb4ba3642","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.16.0\u002Frsigma-aarch64-apple-darwin.tar.gz",{"fileName":70,"sizeMb":259,"sha256":263,"downloadCount":143,"originUrl":264},"a92937e4c73522e92f0c14bda0a103eb48c9e288f24c8c18c0634ebb17755ec8","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.16.0\u002Frsigma-aarch64-pc-windows-msvc.zip",{"fileName":76,"sizeMb":266,"sha256":267,"downloadCount":143,"originUrl":268},14.01,"982a905a41ff6c8c2a2879a7dfab7639315650a423aec6cdab749b674efe4a8a","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.16.0\u002Frsigma-aarch64-unknown-linux-gnu.tar.gz",{"fileName":82,"sizeMb":270,"sha256":271,"downloadCount":143,"originUrl":272},14.63,"4fc05a708399a5184caeaf4ed676ad8a0bfd541ae4d91b8218bc46b401101eeb","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.16.0\u002Frsigma-x86_64-apple-darwin.tar.gz",{"fileName":87,"sizeMb":274,"sha256":275,"downloadCount":115,"originUrl":276},14.59,"e4ba7a0522492802ca417e09cd27df49974780615b24d535171c79b1afc23d77","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.16.0\u002Frsigma-x86_64-pc-windows-msvc.zip",{"fileName":92,"sizeMb":278,"sha256":279,"downloadCount":79,"originUrl":280},15.04,"63f9c40a43740af5fb061476c138809c181090a9a26de08d204fde87cfb2f825","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.16.0\u002Frsigma-x86_64-unknown-linux-gnu.tar.gz",{"tag":282,"publishAt":283,"semVer":284,"prerelease":61,"assets":286},"v0.15.0","2026-06-11T08:48:45Z",[26,285,26],15,[287,291,295,299,303,307],{"fileName":64,"sizeMb":288,"sha256":289,"downloadCount":143,"originUrl":290},12.31,"a3e8f40e022baa9232557f9e8a99b05a03fc5b224cddbafbd3cf37bf20db0d85","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.15.0\u002Frsigma-aarch64-apple-darwin.tar.gz",{"fileName":70,"sizeMb":292,"sha256":293,"downloadCount":143,"originUrl":294},12.22,"16d07b67bc0d7729e93938b7ff1d8376a6cf76d9c93bd13d432c2ba7a2a47464","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.15.0\u002Frsigma-aarch64-pc-windows-msvc.zip",{"fileName":76,"sizeMb":296,"sha256":297,"downloadCount":143,"originUrl":298},12.65,"453228c457865dd36cab67e838cd254e89ab26c3eb7116d4993b226fb7845b85","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.15.0\u002Frsigma-aarch64-unknown-linux-gnu.tar.gz",{"fileName":82,"sizeMb":300,"sha256":301,"downloadCount":143,"originUrl":302},13.22,"e9f9261f76d443e38a762b463dd632af81782416130b42dd9290f1acb9c1fd34","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.15.0\u002Frsigma-x86_64-apple-darwin.tar.gz",{"fileName":87,"sizeMb":304,"sha256":305,"downloadCount":67,"originUrl":306},13.09,"ff56ef02866cfddbbf07431b89c894bff8554c867e482893c3f02d1d4a49ea1f","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.15.0\u002Frsigma-x86_64-pc-windows-msvc.zip",{"fileName":92,"sizeMb":308,"sha256":309,"downloadCount":143,"originUrl":310},13.6,"7a0c845c68b410ad60824d698eee5692ee204fd4166cd8e8dfde04a48cd57c7f","https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Fdownload\u002Fv0.15.0\u002Frsigma-x86_64-unknown-linux-gnu.tar.gz",{"description":312,"readmeHtml":313},"一个完整的Sigma检测工程工具包，包含解析器、评估引擎、规则转换、流式运行时、linter、CLI、MCP和LSP服务器，支持OTLP、EVTX等多种日志格式。","\u003Ch2 id=\"项目概述\">项目概述\u003C\u002Fh2>\u003Cp>RSigma 是一个完整的检测工程工具包，用于 Sigma 检测标准。它包含解析器、评估引擎、规则转换、流式运行时、linter、CLI、MCP 和 LSP 服务器。RSigma 将 Sigma YAML 规则解析为强类型 AST，编译为优化的匹配器，并实时评估日志事件。它支持多种日志格式，包括 JSON、syslog（RFC 3164\u002F5424）、logfmt、CEF、EVTX（Windows Event Log）、纯文本和 OTLP（OpenTelemetry 协议），默认自动检测。OTLP 支持允许任何 OpenTelemetry 兼容代理将日志转发到 RSigma 进行检测。\u003C\u002Fp>\n\u003Ch2 id=\"主要功能\">主要功能\u003C\u002Fh2>\u003Cul>\n\u003Cli>\u003Cstrong>Sigma 解析\u003C\u002Fstrong>：将 Sigma YAML 解析为强类型 AST，支持检测、关联和过滤规则\u003C\u002Fli>\n\u003Cli>\u003Cstrong>数组匹配（实验性）\u003C\u002Fstrong>：支持嵌套事件数据中数组成员的匹配，具有 any\u002Fall 成员语义、同元素关联和位置索引\u003C\u002Fli>\n\u003Cli>\u003Cstrong>规则起草\u003C\u002Fstrong>：从示例事件与基线语料库对比中起草检测规则\u003C\u002Fli>\n\u003Cli>\u003Cstrong>规则调优\u003C\u002Fstrong>：从误报事件中提出规范原生过滤器，验证所有已知真阳性仍触发\u003C\u002Fli>\n\u003Cli>\u003Cstrong>内置 Linter\u003C\u002Fstrong>：使用 85 项检查、四个严重级别、抑制、自定义标签命名空间和 14 条安全规则的自动修复来验证规则\u003C\u002Fli>\n\u003Cli>\u003Cstrong>ADS 元数据\u003C\u002Fstrong>：使用 Palantir ADS 部分记录规则，由 linter 强制执行\u003C\u002Fli>\n\u003Cli>\u003Cstrong>LSP 服务器\u003C\u002Fstrong>：提供实时诊断、补全、悬停文档、文档符号和快速修复代码操作\u003C\u002Fli>\n\u003Cli>\u003Cstrong>pySigma 兼容处理管道\u003C\u002Fstrong>：处理字段映射和后端配置\u003C\u002Fli>\n\u003Cli>\u003Cstrong>STIX 和 TAXII 支持\u003C\u002Fstrong>：用于威胁情报集成\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"适用人群\">适用人群\u003C\u002Fh2>\u003Cul>\n\u003Cli>安全工程师和检测工程师\u003C\u002Fli>\n\u003Cli>SIEM 开发者和运维人员\u003C\u002Fli>\n\u003Cli>需要 Sigma 规则管理的团队\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"快速上手\">快速上手\u003C\u002Fh2>\u003Col>\n\u003Cli>从 \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftimescale\u002Frsigma\u002Freleases\u002Flatest\" target=\"_blank\" rel=\"noopener noreferrer\">GitHub Releases\u003C\u002Fa> 下载 Linux、macOS 或 Windows（amd64 和 arm64）的预编译二进制文件\u003C\u002Fli>\n\u003Cli>或从 crates.io 安装 CLI：\u003Ccode>cargo install --locked rsigma\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>安装 LSP 服务器：\u003Ccode>cargo install --locked rsigma-lsp\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>使用 Docker 多架构镜像（linux\u002Famd64、linux\u002Farm64）\u003C\u002Fli>\n\u003Cli>使用 \u003Ccode>rsigma backend convert rules\u002F -t splunk\u003C\u002Fcode> 转换规则\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch2 id=\"核心优势\">核心优势\u003C\u002Fh2>\u003Cul>\n\u003Cli>完整的 Sigma 工具链，包含解析、评估、转换和运行时\u003C\u002Fli>\n\u003Cli>支持 OTLP 协议，任何 OpenTelemetry 兼容代理可转发日志进行检测\u003C\u002Fli>\n\u003Cli>内置 LSP 服务器，提供编辑器内实时诊断和补全\u003C\u002Fli>\n\u003Cli>开放标准：Sigma 检测规则、OpenTelemetry 日志摄入、STIX\u002FTAXII 威胁情报\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"系统要求\">系统要求\u003C\u002Fh2>\u003Cul>\n\u003Cli>操作系统：Linux、macOS、Windows\u003C\u002Fli>\n\u003Cli>支持架构：amd64、arm64\u003C\u002Fli>\n\u003C\u002Ful>\n",1790699419721]