Rule Library

Sigma Rules

Browse detections by severity and log source, with YAML and sample events one click away.

3,782Total
3,164Detection
474Emerging
141Hunting
2 rulesInspect a rule without leaving your results.
hightestEmerging Threat

Blue Mockingbird

Attempts to detect system changes made by Blue Mockingbird

windowsprocess_creation
2022-10-09
hightestEmerging Threat

Blue Mockingbird - Registry

Attempts to detect system changes made by Blue Mockingbird

windowsregistry_set
2023-08-17