Rule Library

Sigma Rules

Browse detections by severity and log source, with YAML and sample events one click away.

3,782Total
3,164Detection
474Emerging
141Hunting
4 rulesInspect a rule without leaving your results.
hightestEmerging Threat

Small Sieve Malware CommandLine Indicator

Detects specific command line argument being passed to a binary as seen being used by the malware Small Sieve.

windowsprocess_creation
2023-05-19
hightestEmerging Threat

Small Sieve Malware Registry Persistence

Detects registry value with specific intentional typo and strings seen used by the Small Sieve malware

windowsregistry_set
2023-08-17