Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
An open format for writing detection rules in plain YAML text, tied to no particular product. A rule written once in Sigma can be converted into the query language of whichever SIEM a team runs, which is how detections get shared publicly instead of locked inside one vendor.