I maintain a small python tool called SIEMForge. it builds and converts SIEM detection content, Sigma rules plus a Sysmon config plus Wazuh rules, and it ships a log scanner so you can test a rule against a raw log file before you push it to a real SIEM. a while back i added a size cap to the s...

Source: [Dev.to](https://dev.to/tiltedlunar123/the-size-cap-on-my-log-scanner-turns-itself-off-exactly-when-it-cant-measure-the-file-4j20)

Sponsored