Phoenix
Sigma IntelligenceBeta

Search rules

Search the full rule library from any page.

    Open navigation menuClose navigation menu
    Rule Library

    Sigma Rules

    Browse detections by severity and log source, with YAML and sample events one click away.

    3,782Total
    3,164Detection
    474Emerging
    141Hunting
    2 rulesInspect a rule without leaving your results.
    hightestEmerging Threat

    GALLIUM IOCs

    Detects artifacts associated with GALLIUM cyber espionage group as reported by Microsoft Threat Intelligence Center in the December 2019 report.

    windowsprocess_creation
    2024-11-23
    hightestEmerging Threat

    GALLIUM Artefacts - Builtin

    Detects artefacts associated with activity group GALLIUM - Microsoft Threat Intelligence Center indicators released in December 2019.

    windowsdns-server-analytic
    2023-01-02