#python #elasticsearch #ids #logging #monitoring #security #siem #signatures #splunk #sysmon

https://github.com/SigmaHQ/sigma

#other #awesome #awesome_list #cybersecurity #detection_engineering #mitre #splunk #threat_detection

https://github.com/infosecB/awesome-detection-engineering

#python #elasticsearch #ids #logging #monitoring #security #siem #signatures #splunk #sysmon

Sigma is a way to share rules for detecting bad behavior in computer logs. It's like a common language that works with many different systems, making it easy to share and use detection methods across different platforms. This helps security teams work together and improve their ability to find threats. Sigma rules are flexible, easy to write, and can be used with systems like Splunk, Elasticsearch, and Microsoft Defender. The main benefit is that you can write a rule once and use it on many systems, saving time and effort.

https://github.com/SigmaHQ/sigma