Phoenix
Sigma IntelligenceBeta

Search rules

Search the full rule library from any page.

    Open navigation menuClose navigation menu
    Rule Library

    Sigma Rules

    Browse detections by severity and log source, with YAML and sample events one click away.

    3,782Total
    3,164Detection
    474Emerging
    141Hunting
    3 rulesInspect a rule without leaving your results.
    criticaltestEmerging Threat

    CVE-2021-31979 CVE-2021-33771 Exploits by Sourgum

    Detects patterns as noticed in exploitation of Windows CVE-2021-31979 CVE-2021-33771 vulnerability and DevilsTongue malware by threat group Sourgum

    windowsfile_event
    2022-10-09
    criticaltestEmerging Threat

    CVE-2021-31979 CVE-2021-33771 Exploits

    Detects patterns as noticed in exploitation of Windows CVE-2021-31979 CVE-2021-33771 vulnerability and DevilsTongue malware by threat group Sourgum

    windowsregistry_set
    2023-08-17
    hightestEmerging Threat

    SOURGUM Actor Behaviours

    Suspicious behaviours related to an actor tracked by Microsoft as SOURGUM

    windowsprocess_creation
    2022-10-09