Sigma (signature format) explained

Sigma is a signature format based on pattern matching for system logging, to detect malicious behavior in computer systems.^{[1] [2] [3]}

See also

• YARA
• Snort

Further reading

• Web site: IDS for logs: Towards implementing a streaming Sigma rule engine. Markus. Kont. Cooperative Cyber Defence Centre of Excellence.

External links

• GitHub repository
• sigmatools on PyPi

Notes and References

1. Book: Martinez, Roberto . Incident Response with Threat Intelligence Practical Insights into Developing an Incident Response Capability Through Intelligence-Based Threat Hunting. . 2022 . Packt Publishing, Limited . 978-1-80107-099-7 . Birmingham . 1321804492.
2. Book: Palacin, Valentina . Practical Threat Intelligence and Data-Driven Threat Hunting : A Hands-On Guide to Threat Hunting with the ATT&CK(tm) Framework and Open Source Tools. . 2021 . Packt Publishing, Limited . 978-1-83855-163-6 . Birmingham . 1235594404.
3. Book: SIMON., ROUTIN, DAVID. ROSSIER, SAMUEL. THOORES . PURPLE TEAM STRATEGIES : enhancing global security posture through uniting red and blue teams with... adversary emulation. . 2022 . PACKT PUBLISHING LIMITED . 978-1-80107-429-2 . 1322811650.