Pattern Detection and Correlation in JSON Logs

Introducing RSigma: a Rust toolkit for evaluating Sigma detection rules against JSON events without a SIEM high-level detection pipeline You have a stream of JSON logs. Maybe it’s an NDJSON export from an incident investigation, a dump of Okta audit events, CloudTrail records from a compromised AWS account, or simply the output of a service you’re debugging. You want to find suspicious patterns,…