124 sigma-cli(1) - Kailash Tool Reference
124.1 sigma-cli
sigma-cli - Sigma rule conversion command-line interface.
| Layer | CLASSIC |
| Category | c-09-forensics-ir-reporting |
| Safety class | safe |
| Licence | LGPL-2.1-or-later |
| Upstream | github.com/SigmaHQ/sigma-cli |
124.1.1 NAME
sigma-cli - Sigma rule conversion command-line interface.
124.1.2 SYNOPSIS & usage
Derived from the upstream README at generation time; verify against --help where the tool is installed.
python -m pipx install sigma-cli
python -m pip install sigma-clipython3 -m pip install sigma-cli124.1.3 DESCRIPTION (upstream)
This is the Sigma command line interface using the pySigma library to manage, list and convert Sigma rules into query languages. The easiest way to install the Sigma CLI is via pipx or pip. For this purpose run one of the following: python -m pipx install sigma-cli python -m pip install sigma-cli on macOS use python3 -m pip install sigma-cli brew install sigma-cli Another way is to run this from source in a virtual environment managed by Poetry: git clone https://github.com/SigmaHQ/sigma-cli.git cd sigma-cli poetry install poetry shell The CLI is available as sigma command. A typical invocation is: sig
124.1.4 CONFIGURATION (detected)
Config-surface markers detected in the upstream README (7 matches, e.g. test.yml, savedsearches.conf). A full config reference page for this tool is queued under the config-page policy — this line is the detection record, not the page.
124.1.5 SEE ALSO
- Category: c-09-forensics-ir-reporting in the category directory (sister tools listed there).
- Configuration reference — files, environment variables, samples.
ref: pin - verified 2026-10-14