This is the galaxy that I've created to map sigma rules into galaxies in MISP. Once the galaxy is uploaded, it looks like this.

Blog explanation: https://jstnk9.github.io/jstnk9/blog/Sigma-Rules-as-MISP-galaxies

Python3 is needed. First install the requirements.txt, I recommend the use of virtualenv for this purpose.

pip install -r requirements.txt

After that, you can execute the script with the folder of your sigma rules as parameter.

Example for Windows

python sigma-to-galaxy.py -p "C:\github\sigma\rules" -r 

Example for Linux

python sigma-to-galaxy.py -p "/opt/sigma/rules/" -r 

If there are sigma rules with the same title, you can see those in the terminal printed. In that case, I recommend to modify the title, since it will generate some problems in your MISP.

You can add this galaxy to some specific MISP Object and attribute

Or you can add this galaxy at the event level

Version 2.0 includes ATT&CK MITRE galaxy relationship