Being able to run Sigma searches against data in Insight would be hugely beneficial. Every single SIEM competitor to Rapid7 has integrated with them, please can we look at integrating with this project! Additional points for allowing YARA queries in IDR.
thank you so much for your feedback.
We currently are not supporting Sigma in IDR, but thank you for your input, we are going to review it and let you know