SIGMA Rule Repository Enhancements— New Folder Structure & Rule Types

Sigma Rule Repository Enhancements— New Folder Structure & Rule Types

In the past few months we’ve been busy doing a major overhaul of the Sigma project, which includes rules re-writes, metadata enhancements (titles, descriptions, false positives notes) and much more.

Last month we introduced the logsource-guides a new addition that aims to ease the process of mapping the different log sources used in Sigma rules and their OS counterparts

More details were published in a …

amp descriptions doing false positives folder guides major metadata project repository rules sigma types