Sign in Get started

Sigma

A generic rule format to express search queries on log data

The processing pipeline described in this article and the resulting output.

Introducing Query Post-Processing and Output Finalization to Processing Pipelines

Generation of the same Sigma rule into a Splunk query without a pipeline, only the Sysmon pipeline and in addition the custom pipeline developed in this article.

Connecting Sigma Rule Sets to your Environment with Processing Pipelines

Building Flexible Detections with Sigma Placeholders

How placeholders allow to separate detection logic from environment-specific values to build flexible&reusable Sigma rules.

Nasreddine Bencherchali

Sigma Rule Repository Enhancements— New Folder Structure & Rule Types

Nasreddine Bencherchali

Community Contribution Highlights — SentinelOne Joins PySIGMA

Quarterly Sigma Project Update Q1/2023

New Features, Tools, and Community Contributions

About Sigma_HQLatest StoriesArchiveAbout MediumTermsPrivacyTeams