This is the pySigma-pipeline-sentinelone backend for pySigma. It provides the package sigma.backends.sentinelone with the SentinelOneBackend class.
Further, it contains the following processing pipelines in sigma.pipelines.sentinelone:
- pipeline1: purpose
- pipeline2: purpose
It supports the following output formats:
- default: plain pySigma-pipeline-sentinelone queries
- format_1: purpose
- format_2: purpose
This backend is currently maintained by: