I'm Thomas, an incident responser and threat hunter from Germany. I love to develop security tools that are useful for my work or just for fun or researching infosec topics. Lots of my spare time I'm working on Sigma, especially the Python Sigma toolchain, but I've also created or contributed to lots of other tools. One of my recent projects is Log4Pot, a Log4Shell honeypot. I've also set up honeypot instances and share the results with the community.
Featured work
-
SigmaHQ/sigma
Main Sigma Rule Repository
Python 8,026 -
SigmaHQ/pySigma
Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
Python 373 -
thomaspatzke/Log4Pot
A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
Python 89 -
thomaspatzke/elk-detection-lab
An ELK environment containing interesting security datasets.
Shell 132 -
thomaspatzke/WASE
The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch
Python 111
$5 a month
SelectYou're regularly using one of my open source tools and want to support my open source development? You can already do this with a small monthly amount.
$10 a month
SelectYou're regularly using one of my open source tools and want to support my open source development? You can already do this with a small monthly amount.
$50 a month
SelectYou regularly use one of my projects in your corporate environment and want to support my work on them? This is a reasonable amount to do this 😊
$100 a month
SelectYou're using Sigma in your corporate environment and want to be informed about the recent news and upcoming developments? Join this tier and get a monthly newsletter.
$250 a month
SelectIf you use Sigma actively in your corporate environment and want to support my work on it you can choose this tier and get:
- a monthly newsletter about Sigma.
- My MS Teams contact and a mail address so that you can get in touch with me in case of questions.