Security Observability with RSigma and the LGTM Stack

Converting Sigma Rules to Dynamic Grafana Alerts This is the fourth article in a series on RSigma . The first article introduced RSigma as a CLI tool for evaluating Sigma rules against JSON logs. The second covered running it as a streaming daemon with HTTP and NATS input, stateful correlation, and persistent state. The third showed how to convert Sigma rules into PostgreSQL SQL and run them as…