search

pipelinelabo / DatalaiQ

0 stars 1 forks source link

Windows Sigma Rules Conversions #9

Closed lota-1234 closed 3 weeks ago

lota-1234 commented 3 weeks ago

Windows Sigma Rules are part of the Sigma project, an open standard for writing rules to detect suspicious activity in log files. These rules can be used for threat detection across various systems, including Windows. The Sigma rules for Windows cover a range of use cases, including detecting malware, suspicious processes, unauthorized access, and other security events.

To convert Sigma rules for use in specific security platforms, tools like (https://github.com/SigmaHQ/sigma/wiki/Tools) can be utilized. These tools translate Sigma rules into formats compatible with SIEMs like Splunk, ElasticSearch, and more.

For more details, visit the Sigma Rules Repository.

lota-1234 commented 3 weeks ago

Discussed with anis bhaia close this issue and generate auto convert task for mushfiq