🛡️SOC & Threat Intel

Sigma Rule Converter

Paste any existing Sigma rule (YAML) and convert it to Splunk SPL, Elastic (Lucene/ECS) and Microsoft Sentinel / Defender KQL. Supports modifiers (contains, startswith, endswith, all, re, cidr, base64, windash), and/or/not logic and "1 of selection*" conditions. This free soc & threat intel tool runs entirely in your browser — no data leaves your device, no account required, and it keeps working offline once the page has loaded.

sigmaconvertconvertersplunksplelasticlucenekql

More SOC & Threat Intel tools

MITRE ATT&CK Lookup YARA Rule Builder SOC Pattern Library OSINT Dork Builder Email Header Analyzer CVE Lookup (Offline)
Browse all 146 tools →