### Installing Splunk Sigma CLI Plugin Example - Shell

Source: https://github.com/sigmahq/sigma-cli/blob/main/README.md

Installs the Splunk backend plugin, making it available for use with the `sigma convert` command to generate Splunk queries.

```Shell
sigma plugin install splunk
```

--------------------------------

### Installing Sigma CLI from Source via Poetry - Shell

Source: https://github.com/sigmahq/sigma-cli/blob/main/README.md

Installs the Sigma CLI and its dependencies from source using the Poetry dependency manager. This involves cloning the repository, installing dependencies, and activating the project's virtual environment.

```Shell
git clone https://github.com/SigmaHQ/sigma-cli.git
cd sigma-cli
poetry install
poetry shell
```

--------------------------------

### Installing Sigma CLI Plugin - Shell

Source: https://github.com/sigmahq/sigma-cli/blob/main/README.md

Installs a specific backend or processing pipeline plugin for the Sigma CLI. Replace `<backend>` with the name of the desired plugin.

```Shell
sigma plugin install <backend>
```

--------------------------------

### Installing Sigma CLI via pip/pipx - Shell

Source: https://github.com/sigmahq/sigma-cli/blob/main/README.md

Installs the Sigma command-line interface using the pipx or pip Python package managers. pipx installs in an isolated environment, while pip installs into the current environment.

```Shell
python -m pipx install sigma-cli
python -m pip install sigma-cli
```

--------------------------------

### Listing Available Sigma CLI Plugins - Shell

Source: https://github.com/sigmahq/sigma-cli/blob/main/README.md

Displays a list of all backend and processing pipeline plugins that are currently installed and available for use with the Sigma CLI.

```Shell
sigma plugin list
```

--------------------------------

### Converting Sigma Rules to Splunk Example - Shell

Source: https://github.com/sigmahq/sigma-cli/blob/main/README.md

Demonstrates converting Sigma rules located in a specific directory (`sigma/rules/windows/process_creation`) into Splunk queries (`-t splunk`) using the Sysmon processing pipeline (`-p sysmon`).

```Shell
sigma convert -t splunk -p sysmon sigma/rules/windows/process_creation
```

--------------------------------

### Installing Sigma CLI via pip on macOS - Shell

Source: https://github.com/sigmahq/sigma-cli/blob/main/README.md

Installs the Sigma command-line interface using the pip package manager specifically on macOS, typically using `python3`.

```Shell
python3 -m pip install sigma-cli
```

--------------------------------

### Using Generic Sigma CLI Convert Command - Shell

Source: https://github.com/sigmahq/sigma-cli/blob/main/README.md

Provides the general syntax for converting Sigma rules using the `sigma convert` command. It requires specifying a target backend (`-t`) and can optionally include multiple processing pipelines (`-p`) and input files or directories.

```Shell
sigma convert -t <backend> -p <processing pipeline 1> -p <processing pipeline 2> [...] <directory or file>
```

--------------------------------

### Adding Poetry Package Dependency - Shell

Source: https://github.com/sigmahq/sigma-cli/blob/main/README.md

Adds a package as a dependency to the project managed by Poetry. This is used to integrate backends or pipelines by adding their corresponding Python packages.

```Shell
poetry add <package name>
```

--------------------------------

### Converting Sigma Rules with Format and Output File - Shell

Source: https://github.com/sigmahq/sigma-cli/blob/main/README.md

Converts Sigma rules to Splunk format (`-t splunk`) using the Sysmon pipeline (`-p sysmon`), specifying the output format as `savedsearches` (`-f`) and writing the result to a file named `savedsearches.conf` (`-o`).

```Shell
sigma convert -t splunk -f savedsearches -p sysmon -o savedsearches.conf sigma/rules/windows/process_creation
```

=== COMPLETE CONTENT === This response contains all available snippets from this library. No additional content exists. Do not make further requests.