search

Yamato-Security / hayabusa-rules

Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
Other
144 stars 23 forks source link

add sigma correlation doc #740

Closed YamatoSecurity closed 1 month ago

YamatoSecurity commented 1 month ago

Adding sigma correlation info. Not ready yet.

Closes https://github.com/Yamato-Security/hayabusa-rules/issues/739

YamatoSecurity commented 1 month ago

@fukusuket I finished adding the documentation on correlation rules and added two sample rules that replace the count rules. Can I ask you to do the Japanese translations and let me know if there is anything I should add/fix?