Rule Library

Sigma Rules

Browse detections by severity and log source, with YAML and sample events one click away.

3,782Total
3,164Detection
474Emerging
141Hunting
2 rulesInspect a rule without leaving your results.
mediumtestEmerging Threat

Defrag Deactivation

Detects the deactivation and disabling of the Scheduled defragmentation task as seen by Slingshot APT group

windowsprocess_creation
2022-10-09
mediumtestEmerging Threat

Defrag Deactivation - Security

Detects the deactivation and disabling of the Scheduled defragmentation task as seen by Slingshot APT group

windowssecurity
2022-11-27