Rule Library

Sigma Rules

Browse detections by severity and log source, with YAML and sample events one click away.

3,782Total
3,164Detection
474Emerging
141Hunting
6 rulesInspect a rule without leaving your results.
criticaltestEmerging Threat

Turla Group Lateral Movement

Detects automated lateral movement by Turla group

windowsprocess_creation
2022-10-09
criticaltestEmerging Threat

Turla Group Commands May 2020

Detects commands used by Turla group as reported by ESET in May 2020

windowsprocess_creation
2025-10-19
criticaltestEmerging Threat

Turla Group Named Pipes

Detects a named pipe used by Turla group samples

windowspipe_created
2021-11-27
hightestEmerging Threat

Turla Service Install

This method detects a service install of malicious services mentioned in Carbon Paper - Turla report by ESET

windowssystem
2021-11-30
criticaltestEmerging Threat

Turla PNG Dropper Service

This method detects malicious services mentioned in Turla PNG dropper report by NCC Group in November 2018

windowssystem
2021-11-30