SigmaHQ / sigma Public

Discussions

• 2

  💬

  Normalization of rule names

  frack113 started Feb 19, 2022 in General

  

  

  

  

  5
• 1

  🙏

  Does SIGMAC enable converting to SIGMA from supported backends?

  wbnod asked Feb 4, 2022 in Q&A · Answered

  

  

  

  

  3
• 1

  💬

  Should we move the "other" into "builtin" folder?

  Neo23x0 started Jan 20, 2022 in General

  

  

  

  

  4
• 3

  🙏

  Using Process Name instead of Image

  lolbins asked Jan 19, 2022 in Q&A · Unanswered

  

  

  0
• 3

  💡

  Add generic/windows-services.yml

  frack113 started Jan 15, 2022 in Ideas

  

  

  0
• 1

  🙏

  Sigma base fields that work for all vendors

  esikuriansky asked Jan 12, 2022 in Q&A · Unanswered

  

  

  1
• 1

  💡

  Suggestion for Rules Directed at PowerShell

  austinsonger started Dec 20, 2021 in Ideas

  

  

  2
• 1

  🙏

  Auditbeat use and Problems

  robrankin asked Nov 25, 2021 in Q&A · Unanswered

  

  

  0
• 1

  💬

  Normelize clould rules

  frack113 started Nov 12, 2021 in General

  

  

  0
• 1

  💡

  Lowercase logsources

  frack113 started Nov 3, 2021 in Ideas

  

  

  0
• 1

  💡

  Add new status "deprecated" for obsoletes rules

  frack113 started Oct 21, 2021 in Ideas

  

  

  

  

  6
• 1

  🙏

  Error while using sigmac

  dmange3190 asked Oct 29, 2021 in Q&A · Answered

  

  

  1
• 1

  💬

  Any Sigmac mapping for product supporting TCP JSON stream

  Tomasuh started Oct 12, 2021 in General

  

  

  1
• 3

  💡

  Tags: CVE Tags

  Neo23x0 started Oct 14, 2021 in Ideas

  

  

  1
• 1

  💡

  Support needed for detection of creating new process using stolen access token T1134.002

  Jackson-Pollock started Oct 14, 2021 in Ideas

  

  

  

  

  14
• 2

  💬

  Sigma Correlations Draft

  Neo23x0 started Oct 20, 2021 in General

  

  

  0
• 1

  🙏

  Does SIGMA allow for sequence

  austinsonger asked Oct 18, 2021 in Q&A · Unanswered

  

  

  1
• 2

  💬

  Linux CommandLine Use - Require Laurel / Sysmon / EDR

  Neo23x0 started Sep 26, 2021 in General

  

  

  8
• 1

  💡

  relevance category file_event name

  frack113 started Sep 19, 2021 in Ideas

  

  

  2
• 1

  💬

  Planned Changes from our web session on 02.09.2021

  Neo23x0 started Sep 2, 2021 in General

  

  

  

  

  6
• 1

  💡

  Expansion of Author Field

  austinsonger started Sep 4, 2021 in Ideas

  

  

  2
• 1

  🙏

  Field Mappings

  SecJesus asked Sep 2, 2021 in Q&A · Answered

  

  

  

  

  3