SigmaHQ Rules Release Highlights — r2023–11–06

SigmaHQ Rules Release Highlights — r2023–11–06

Sigma Rule Packages for 23–10–2023 are released and available for download. This release saw the addition of 27 new rules, 40 rule updates and 9 rule fixes.

New Rules

Some highlights for the newer rules include, emerging threat detections for Diamond Sleet APT based on Microsoft report covering IOCs and DLL sideloading activity.

title: Diamond Sleet APT DLL Sideloading Indicators
id: d1b65d98-37d7-4ff6-b139-2d87c1af3042
status: experimental
description: Detects DLL sideloading activity seen used …

article conversation link medium nov people release rules sec story the conversation