Transform Sigma LOLRMM to S1PQ #33

	name: Transform Sigma LOLRMM to S1PQ

	on:
	workflow_dispatch:

	schedule:
	- cron: "0 0 * * *" # Run once per day at midnight

	jobs:
	run-python-script:
	runs-on: ubuntu-latest # Change value from 'self-hosted' to 'ubuntu-latest' if you want to host it on Github.
	permissions:
	contents: write

	steps:
	- name: Checkout code
	uses: actions/[email protected]

	- name: Set up Python
	uses: actions/[email protected]
	with:
	python-version: '3.10'

	- name: get sigma-cli # other parts of my CI/CD workflow use the sigma-cli - I've left it in, but you should be ok to remove this section and the plugin install steps too.
	run: \|
	python -m pip install sigma-cli

	- name: Install sigma-cli pipelines
	run: \|
	sigma plugin install sentinelone-pq

	- name: Get Sigma repository
	run: \|
	git clone https://github.com/magicsword-io/LOLRMM.git

	- name: Create destination folder 'S1PQ - LOLRMM'
	run: \|
	mkdir -p "${{ github.workspace }}/S1PQ - LOLRMM"

	- name: Run 'Sigma to S1PQ - Windows process event creation script'
	run: python lolrmm-to-s1pq-converter-create_markdown.py

	- name: Commit and push translated process creation rules
	uses: stefanzweifel/git-auto-commit-action@v5

Provide feedback