StoW - Sigma to Wazuh rule converter in GO

Reason for moving from Python3:

• I want to learn GO.
• I don't like Python data structures.
• Fresh look at the problem by starting over.

Problem(s) this probably won't fix by moving to GO:

• Converting a more expressive logic (Sigma) to a less expressive logic (Wazuh)

Current state:

• Skeleton PoC
• Working Sigma / Wazuh data structures and config moved to Yaml implemented
• Reads in all Sigma rules
• Creates skeleton Wazuh rules (no logic conversion)

Configuration

# Look in this file for configuration options
config.yaml

Compile and run

# install golang on Ubuntu distros
sudo apt install golang-go
# compile into a smaller binary
go build -ldflags="-s -w"
# only do if you want an even smaller binary
upx StoW
# run it
./StoW