Building Detection Rules with Sigma
Builds vendor-agnostic detection rules using the Sigma rule format for
4,809,615 AI resources indexedWorking toward the world’s largest AI resource index.
Reusable instructions for compatible AI agents.
Field counts come from the latest full-catalog snapshot. A resource can belong to several fields and platforms.
Builds vendor-agnostic detection rules using the Sigma rule format for
Detects defense evasion techniques used by adversaries in endpoint logs
Identifies lateral movement techniques in enterprise networks by analyzing
Deploy and manage network honeypots using OpenCanary, T-Pot, or Cowrie
Detect process injection techniques (T1055) including classic DLL injection, process hollowing, and APC injection by analyzing Sysmon events for cross-process memory operations, remote thread creation, and anomalous DLL loading patterns.
Detect C2 beaconing patterns in network traffic using frequency analysis, jitter detection, and domain reputation
Detect MITRE ATT&CK T1547.001 registry Run key persistence by analyzing Sysmon Event ID 13 logs and registry
Agent skill for Security Engineer, Data Analyst, published by mahipal. Project details and file access are provided by the publisher.
Agent skill for Security Engineer, Data Analyst, published by mahipal. Project details and file access are provided by the publisher.
Try a broader search or clear some filters.
Platform labels describe intended use. Read each resource's author credits, requirements and available access methods.