Testing Sigma Rules Against Local Logs Without a SIEM
I'd written a few Sigma rules for my home lab and wanted to know if they actually fired on real Sysmon events. The standard answer is "deploy to Waz…
Tech news from the best sources
I'd written a few Sigma rules for my home lab and wanted to know if they actually fired on real Sysmon events. The standard answer is "deploy to Waz…