Enes Cayvarli·Nov 2Threat Hunting with Sigma: From Chainsaw to SplunkSigma is a powerful, platform-independent detection rule format that helps security analysts identify suspicious activities across…
Muhammad Talha·Sep 19Sigma Rules That Actually Fire — Detection Engineering Without the Cargo CultWhy Most Rules Deployed in Production Detect Nothing, Generate Everything, or Both Simultaneously, and What Writing Detection Logic That…
Yazanshanniek·Sep 2Building a Detection-as-Code Pipeline for Microsoft Defender XDRWriting a detection rule is usually the easy part. The challenge is what happens after that.
InOSINT TeambyAdam Goss·Aug 24Sigma Rules Explained: Architecture, pySigma, Modifiers, & CorrelationOn 10 December 2021, Log4Shell dropped, and within hours attackers were scanning the entire internet with a string shorter than a tweet.
rizko·Jul 29Menulis rule Sigma itu mudah. Membuktikan rule-nya bekerja, itu bagian pentingnyaSaya membedah Blue Team Sigma Rules dari sisi yang paling berguna: cara rule ditulis, diuji dengan log positif dan negatif, lalu dibawa ke…
Cyberwithalish·Jul 6I Turned My Splunk Searches Into Portable Detection Rules, and Windows 11 Fought BackProject 2 of my SOC portfolio: detection as code with Sigma
InMeetCyberbySafiullah Khan·Jun 29I Built a Zero-Touch Threat Intel Pipeline That Writes Sigma Rules While I SleepHow I automated CISA KEV monitoring, AI-generated Sigma detection rules, SharePoint logging, and Slack alerting using n8n — with zero…
Ayush Pathania·Jun 26Deep Dive Into Moka: Analyzing a Babylon RAT-Based Information Stealer and KeyloggerExecutive Summary
