Discussions

• 2 You must be logged in to vote

  🙏

  Event Correlation using sigma rules

  Sheharyar-Khalid asked Feb 20, 2023 in Q&A · Closed · Answered

  

  

  1
• 1 You must be logged in to vote

  💡

  Seperate Folder For "Hunting Rules"

  Enhancement Work In Progress Some changes are needed

  nasbench started Aug 16, 2022 in Ideas

  

  

  

  

  6
• 💡

  Tags: CVE Tags

  Neo23x0 started Oct 14, 2021 in Ideas · Closed

  

  

  

  

  2
• 1 You must be logged in to vote

  🙏

  What's type of regex?

  kazuminn asked Oct 30, 2022 in Q&A · Closed · Answered

  

  

  

  

  4
• 2 You must be logged in to vote

  🙏

  win_susp_regsvr32_flags_anomaly.yml

  AlphaKiloDelta asked Nov 4, 2022 in Q&A · Closed · Answered

  

  

  

  

  7
• 1 You must be logged in to vote

  🙏

  In "NotPetya Ransomware Activity" rule, for which field we have this selection: select_perfc_keyword.

  qasimqlf asked Sep 15, 2022 in Q&A · Closed · Answered

  

  

  2
• 1 You must be logged in to vote

  💬

  Manage placeholders Rule

  frack113 started Aug 15, 2022 in General · Closed

  

  

  

  

  9
• 1 You must be logged in to vote

  🙏

  Recursive conversions of sigma rules in to subdirectories

  Iqi-Malick asked Jul 18, 2022 in Q&A · Closed · Answered

  

  

  1
• 1 You must be logged in to vote

  🙏

  Configuration file used for sigma rules conversion

  Iqi-Malick asked Jul 15, 2022 in Q&A · Closed · Answered

  

  

  

  

  3
• 1 You must be logged in to vote

  🙏

  How to write converted rules in a file using command line?

  Iqi-Malick asked Jul 15, 2022 in Q&A · Closed · Answered

  

  

  2
• 1 You must be logged in to vote

  🙏

  How to request permission to contribute to the Sigma rules for azure

  Corissalea asked May 24, 2022 in Q&A · Closed · Answered

  

  

  1
• 1 You must be logged in to vote

  💡

  Dev new backend for sigmac

  nNipsx-Sec started May 19, 2022 in Ideas · Closed

  

  

  1
• 3 You must be logged in to vote

  💬

  Managing a ruleset aligned with Sigma repository

  raomin started May 11, 2022 in General · Closed

  

  

  

  

  3
• 1 You must be logged in to vote

  💡

  Case sensitive Elastic/ELK

  amjcyber started May 10, 2022 in Ideas · Closed

  

  

  1
• 1 You must be logged in to vote

  🙏

  Bad translation of rule (I guess?)

  gpedras asked Apr 29, 2022 in Q&A · Closed · Answered

  

  

  1
• 1 You must be logged in to vote

  💬

  New category file_access

  redsand started Apr 13, 2022 in General · Closed

  

  

  

  

  5
• 1 You must be logged in to vote

  💬

  Split registry_event category

  frack113 started Mar 26, 2022 in General · Closed

  

  

  5
• 2 You must be logged in to vote

  💬

  Logsource Cleanup

  Neo23x0 started Mar 21, 2022 in General · Closed

  

  

  

  

  11
• 1 You must be logged in to vote

  🙏

  no zeek/suricata target then why there are config files of suricata and zeek rule files in the directory?

  IamTenacious asked Mar 10, 2022 in Q&A · Closed · Answered

  

  

  1
• 1 You must be logged in to vote

  🙏

  Does SIGMAC enable converting to SIGMA from supported backends?

  wbnod asked Feb 4, 2022 in Q&A · Closed · Answered

  

  

  

  

  3
• 1 You must be logged in to vote

  💬

  Should we move the "other" into "builtin" folder?

  Neo23x0 started Jan 20, 2022 in General · Closed

  

  

  

  

  4
• 3 You must be logged in to vote

  💡

  Add generic/windows-services.yml

  frack113 started Jan 15, 2022 in Ideas · Closed

  

  

  0
• 1 You must be logged in to vote

  🙏

  Sigma base fields that work for all vendors

  esikuriansky asked Jan 12, 2022 in Q&A · Closed · Answered

  

  

  1
• 1 You must be logged in to vote

  💡

  Suggestion for Rules Directed at PowerShell

  austinsonger started Dec 20, 2021 in Ideas · Closed

  

  

  2
• 1 You must be logged in to vote

  🙏

  Error while using sigmac

  dmange3190 asked Oct 29, 2021 in Q&A · Closed · Answered

  

  

  1