TryHackMe - Sigma

Sigma is a generic and open signature format that allows you to describe relevant log events in a straightforward manner. The rule format is very flexible, easy to write, and allows for the creation of detection rules applicable across different SIEM backends.

Follow/Connect:
💻Blog: https://micahsoday.github.io
💻LinkedIn: https://www.linkedin.com/in/micah-funderburk/
💻TryHackMe: https://tryhackme.com/p/M0dChild

Link to the Room:
🔍https://tryhackme.com/room/

References:
🔗https://github.com/SigmaHQ/sigma-specification/blob/main/Sigma_specification.md
🔗https://www.signalscorps.com/blog/2022/sigma-rules-102-writing-detections-search-identifiers/
🔗https://uncoder.io/
Micah Babinski's LinkedIn/Blog:
🔌https://www.linkedin.com/in/micah-babinski
🔌https://micahbabinski.medium.com/

Видео TryHackMe - Sigma канала Micahs0day