Cybersecurityintermediate1 min read

Sigma Rules

N/A

Sigma检测规则

Sigma Rules · N/A · Sigma检测规则 · SIG-muh roolz · Sigma detection · generic SIEM rules · Cybersecurity · detection · siem · toolsCybersecuritySigma detection generic SIEM rules

/SIG-muh roolz/

Also known as: Sigma detection, generic SIEM rules

Last updated August 9, 2026

Definition

Sigma is a generic language for detection rules that can be converted to many SIEM products — sharing detections without vendor lock-in.

Real-World Example

A Sigma rule for suspicious PowerShell encoded commands converted to Elastic and Splunk queries.

References

discuss://translation · public

Translation discussion

Anyone can read and write here. Pick a display name — no email or account. Please keep the thread constructive. Thumb up a rendering you agree with — that helps the editor see consensus; it does not publish the term by itself. You can edit or delete your own comments from this browser; another device or cleared site data cannot.

Community lists who wrote, on which term, and when.

Loading discussion…