Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

Elemental - An ATT&CK Threat Library

Resources To Learn And Understand SIGMA Rules

IOK (Indicator Of Kit) is an open source language and ruleset for detecting phishing threat actor tools and tactics

BlackBerry Threat Research & Intelligence

S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator

A pySigma wrapper and langchain toolkit for automatic rule creation/translation

Sigma detection rules for hunting with the threathunting-keywords project

Framework definitions that allow to build a custom SIEM.

SysFlow edge processing pipeline

Convert Sigma Rules to different formats

A command line tool that converts Sigma Rules into STIX 2.1 Objects.

Threat Hunting

Repository of Sigma Rules

Script that organize Sigma rules by MITRE | ATT&CK tactics and techniques.

A static site generator for @SigmaHQ rules

Sigma rules fun API. A restful API which contains most funny sigma rules. Sigma-rule-api made by subhranhsu sekhar choudhury.

Threat Detection Repository - YARA / SIGMA rules

Threat Hunting Rules - work in progress