SigmaHQ Rules Release Highlights — r2023–12–21

SigmaHQ Rules Release Highlights — r2023–12–21

Sigma Rule Packages for 21–12–2023 are released and available for download. This release saw the addition of 21 new rules, 55 rule updates and 30 rule fixes by 17+ contributors.

New Rules

Some highlights for the newer rules include, new detections for Cloudflared a tunneling tool by cloudflare covering additional flags, renamed versions and DNS requests.

title: Cloudflared Portable Execution
id: fadb84f0-4e84-4f6d-a1ce-9ef2bffb6ccd
status: experimental
description: |
    Detects the execution of the …

article conversation dec link medium people release robert rules story the conversation