ConceptsSigma Rules
Sigma Rules
An open, vendor-neutral format for writing detection rules in YAML, that can be converted to many SIEM and EDR query languages. Sigma enables community sharing of portable detections.
7 direct links1 lesson
Concept Neighborhood
Explore this concept’s connections in the groups below.
Related · bigger circles cover more lessons
Start here
Detection engineering
A related concept to explore, covered by 16 lessons.
Relatedsorted by lesson coverage
Detection engineeringStart here
16
lessons
Rule Logic Design
7
lessons
Yara Rules
6
lessons
Kusto Query Language
5
lessons
Splunk SPL
5
lessons
Hypothesis-Driven Hunting
1
lesson
Show 1 more connection
Related Lessons
1 lesson covers this conceptSign in to open lesson content directly.