Phoenix
Sigma IntelligenceBeta

Search rules

Search the full rule library from any page.

    Open navigation menuClose navigation menu
    Rule Library

    Sigma Rules

    Browse detections by severity and log source, with YAML and sample events one click away.

    3,782Total
    3,164Detection
    474Emerging
    141Hunting
    3 rulesInspect a rule without leaving your results.
    highstableEmerging Threat

    Potential Emotet Activity

    Detects all Emotet like process executions that are not covered by the more generic rules

    windowsprocess_creation
    2023-02-04
    hightestEmerging Threat

    Log4j RCE CVE-2021-44228 Generic

    Detects exploitation attempt against log4j RCE vulnerability reported as CVE-2021-44228 (Log4Shell)

    Generalwebserver
    2022-02-06
    highexperimentalEmerging Threat

    File Creation Related To RAT Clients

    File .conf created related to VenomRAT, AsyncRAT and Lummac samples observed in the wild.

    windowsfile_event
    2024-12-19