roth-detection-engineering - Apply portable Sigma and YARA detection engineering
detection engineering Sigma YARA SIEM
★ 650 · Updated 2026-10-02
Create portable Sigma and YARA detection rules using Florian Roth's methodology, including testing, metadata, false-positive documentation, and SIEM conversion.
⚙ Write portable Sigma rules ⚙ Create YARA rules ⚙ Convert Sigma to SIEM queries