pySigma SurrealQL Backend

This is the SurrealQL backend for pySigma. It provides the package sigma.backends.surrealql with the SurrealQLBackend class. This backend translates Sigma Rules into SurrealQL syntax to execute queries in SurrealDB. It was developed using the features provided by SurrealDB version 2.0.

It supports the following output formats:

• default: plain SurrealQL queries

This project is currently maintained by:

• obviouslynotraffa

Known issues/limitations

• This issue
• In the future, AND or OR lists could be converted into the IN operator, but this is not a priority for now
• In SurrealDB, it is necessary to create a specific index beforehand for full-text search functionality