Every detection use case,
one searchable catalog.

A mirror of the SigmaHQ/sigma rule set — production rules, emerging threats, threat-hunting hypotheses, compliance mappings, and deprecated history — indexed by product, log source, severity, and MITRE ATT&CK technique. Click any use case to view the raw rule.