-
Tweets379
-
Followers5K
-
Following1
-
Likes182
Because I and the rest of the maintainer team we dont have infinite time. I'm going to be pretty aggressive on PRs submitted to @sigma_hq github.com/SigmaHQ/sigma/ New so called DEs copy pasting random rules and not having the capacity to read the specs will lead to an auto close…
New Sigma release r2025-07-08 is available for download. 🌟43 New Rules 🛡️34 Rule updates 🔬27 Rule Fixes Explore the full release -> github.com/SigmaHQ/sigma/… This release introduces a bunch of new rules including detections for - Katz Stealer - MeshAgent usage -…
New Sigma release r2025-05-21 is available for download. 🌟15 New Rules 🛡️47 Rule updates 🔬13 Rule Fixes Explore the full release -> github.com/SigmaHQ/sigma/… This release focused mainly on updates and tunings of older rules, with newer detections covering NimScan, AdFind,…
Sigma rule packages have been downloaded more than 10M times since we started doing releases in late 2023! Last month package crossed the 2M mark today. 🚀 @sigma_hq
Open Sourced detection.studio here → github.com/northsh/detect… MIT License
🎉I am finally happy announce a brand new tool – detection.studio Sigma to SIEM conversion – done entirely locally (in-browser). Better support for Pipelines & Filters. Persistent workspaces, and Share & Export to Zip. Check it out down here👇
New Sigma release r2025–02–03 is available for download. 🌟5 New Rules 🛡️5 Rule updates 🔬14 Rule Fixes Explore the full release -> github.com/SigmaHQ/sigma/… This release saw the first wave of contribution from the @TheDFIRReport in a new collab we started with the team. 🔥…
Many people use @sigma_hq rules. That's great. We like to share detection knowledge. Don't be afraid to contribute in 2025. Even a simple False Positive is good. If your boss don't want just ask until having an yes 😝
The more I see private detections the more I realize that the @sigma_hq rule repo is a gold mine and it is actually insane that its free. 😌
Last Sigma release of the year r2024-12-19 is available for download :) 🌟 12 New Rules 🛡️ 52 Rule updates 🔬 6 Rule Fixes This release include multiple updates for Linux rules, new AWS rules and more. Check the full change log and start exploring this, by downloading the…
Now that the last release of the year from @sigma_hq is out. I would like to reflect on the progress we made this year by sharing some stats :) - Merged 325 pull request. 🚀 - Had 103 unique contributors. 🤝 - Added 313 new rules. 📝 - Updated and fixed the rules a combined…
This is a really interesting web page published in the @virustotal UI that lists the applied @sigma_hq rules on samples executed in their sandboxes and on how many of those samples the particular Sigma rule matched but not a single AV engine virustotal.com/ui/sigma_rules
New Sigma release r2024-11-10 is available for download 🌟 17 New Rules 🛡️ 35 Rule updates 🔬 4 Rule Fixes This release includes rules covering - Suspicious .RDP file creation by Outlook and other uncommon processes. - IIS config tampering. - PowerShell Web Access abuse. -…
If like me you need the @sigma_hq rules references as PDF for AIR GAP, I started a best effort projet : github.com/frack113/sigma…
A massive thanks to @bsidesTLL for having me on this year. Amazing conference, would recommend anyone to make the trip up 🇪🇪 Slides for the Sigma talk below 👇 sinn.io/sigma-decoding…
Today @RunReveal is announcing support for sigma detections and open sourcing our sigma rule evaluator, sigmalite. Read the blog, and check out the code! sigmalite.dev blog.runreveal.com/introducing-si…
New Sigma release r2024–09–02 is available for download. 🌟75 New Rules 🛡️43 Rule updates 🔬30 Rule Fixes Here is a snippet from this release - Added coverage for multiple GTFOBins. - Updates adding new file sharing domains (*.pages.dev, *.w3spaces.com, *.workers.dev) -…
Thanks to @Kostastsale contribution, UDL rule will also be available to download in next week release of @sigma_hq
Thanks to @Kostastsale contribution, UDL rule will also be available to download in next week release of @sigma_hq https://t.co/BdDTXyMGlG
- MITRE D3FEND tag support. - New related type "Correlation" for easily linking between rules used in correlation. - New modifiers for datetime fields And many more things are coming in @sigma_hq Specification v2.1 later this year.
We're pleased to announce the official release of the Sigma Specification v2.0 🚀 - an important milestone for the Sigma project, that introduces new features as well as many enhancements to the Sigma standard. - @sigma_hq Check out the release blog for all the juicy details -…
Florian Roth ⚡️ @cyb3rops
206K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Thomas Roccia 🤘 @fr0gger_
31K Followers 2K Following AI Security x Threat Intel · Sr. Threat Researcher @Microsoft · Creator of #Unprotect & #NOVA · Malware Warlock · Python 🧡 · Prev @McAfee_Labs · Views mine 😈
Chris Sanders 🔎 �... @chrissanders88
34K Followers 489 Following Ed.D. | Founder @networkdefense @RuralTechFund | Former @Mandiant, DoD | Author: Intrusion Detection Honeypots, Practical Packet Analysis, Applied NSM
Mehmet Ergene @Cyb3rMonk
13K Followers 437 Following https://t.co/uAlYlXIpyV Learn #KQL for #ThreatHunting, #DetectionEngineering, and #DFIR @BluRavenSec | Microsoft Security MVP | #DataScience
John Hammond @_JohnHammond
298K Followers 3K Following Cybersecurity Researcher @HuntressLabs || Just Hacking Training @JustHackingHQ w/ @ethicalhacker || https://t.co/UtsNJiyQtS || https://t.co/narO3sz7y6
Nasreddine Benchercha... @nas_bench
11K Followers 1K Following Detection @Splunk & @cisco | previously @nextronsystems | @sigma_hq & @magicswordio maintainer | Eternal Learner
Christopher Peacock @SecurePeacock
7K Followers 2K Following #PurpleTeam | Ex @RaytheonTech MSSP, @SCYTHE_IO, & @GD_OTS | Taught at BlackHat & DEFCON | #100DaysofSigma | Keep exploring, keep learning, and stay curious
Olaf Hartong @olafhartong
17K Followers 965 Following @FalconForceTeam | researcher with a camera | Microsoft MVP | Snow man role model
J⩜⃝mie Williams @jamieantisocial
10K Followers 7K Following threats && stuff || #UNC1799 forever 🤘|| @DistrictHeather ♥️ + 🍷 **𝚅𝚒𝚎𝚠𝚜 𝚎𝚡𝚙𝚛𝚎𝚜𝚜𝚎𝚍 𝚊𝚛𝚎 𝚖𝚈 օ𝚠𝚗**
Eric Capuano - Bsky: ... @eric_capuano
11K Followers 3K Following Co-Founder @recon_infosec | SANS DFIR Instructor | IANS Faculty | https://t.co/yUXCSu2Yso | ⬡ ❤ @shortxstack
Dr. Anton Chuvakin @anton_chuvakin
41K Followers 9K Following Information security - #SIEM, #DFIR, #EDR formerly at Gartner! Now @GoogleCloud Office of the #CISO; host of @CloudSecPodcast https://t.co/VpKtfz8nXG
Nathan McNulty @NathanMcNulty
17K Followers 1K Following Loves Jesus, loves others | Husband, father of 4, security solutions architect, love to learn and teach | Microsoft MVP | @TribeOfHackers | 🦋@nathanmcnulty.com
Matthew @embee_research
14K Followers 2K Following Security Researcher, Creating and Sharing Educational Content.
John Lambert @JohnLaTwC
43K Followers 800 Following Corporate Vice President, Security Fellow, Microsoft Security Research, johnla(AT)https://t.co/3dGtq71Nby
Koen Van Impe ☕ @cudeso
4K Followers 2K Following Freelancer. CSIRT. Incident Response. Threat Intelligence. Security, IDS, Linux, OpenBSD, Honeypots, Jazz, Literature, Modern Art. https://t.co/D9bkiv10Sy
MISP (@misp@misp-comm... @MISPProject
23K Followers 95 Following MISP - Threat Sharing. An open source software and standards to share, create and validate threatintel and intelligence. Mastodon @[email protected]
PAOanalysis @darklevsec
0 Followers 82 Following malware and security researcher, bug bounty hunter, and threat hunter. PAO stands for persistence access Operations, btw
Salman Asad ⚡️ @deathflash_xyz
30 Followers 427 Following Jack of all trades, master of none. @osm_sec | @BSidesVizag | @hacktronix_in Pentester @cobalt_io
James Ibrahim @JamesIb54140322
54 Followers 3K Following
HxHippy @HxHippy
781 Followers 399 Following CTO & COO @Kief_ma | CCEH | Transforming AI & Cybersecurity Challenges into Business Solutions
CloudMalwareStudioOSX @CMSOSXAI
7 Followers 799 Following https://t.co/qgFp0ACgjW [email protected] $cybersecurity $cyberprotections $cybersafeguards $cyberdefenses
furjean @F3rs3h3n
9 Followers 275 Following Where I drop my “personal” 2 cents. | @SynackRedTeam, @NFLaboratories, Prev: @EYnews
0xbaadcaffe @0xbaadcaff3
0 Followers 68 Following
CSIRT.SK @CSIRT_SK
2K Followers 311 Following CSIRT.SK performs tasks associated with responding to computer security incidents within public administration information systems in the Slovak Republic.
Ff @7zCooler
2 Followers 270 Following
KRIFDIN @KR1FD1N
8 Followers 229 Following Hacking into the world. Finding exploits and bugs, maybe more!
とらじろう @tora_san_toraji
9 Followers 123 Following 豚しゃぶは肩ロース。ロースではなく肩ロース。 ヘルプデスク－ネットワークエンジニアーテクサポ－セキュリティ関連お仕事見習い。安全確保支援士ネスペのみ
Qanon @qanonfree
4 Followers 4K Following
Jorge Reyes @R3YESJ2
0 Followers 59 Following
Qasim Qlf @qasimqlf
319 Followers 2K Following Detection Engineer | Ex-Software Engineer @ NETSOL | | Tech Enthusiast 💻 | Contributer @sigma_hq💡 | Proud Muslim and Pakistani 🇵🇰
Amr Teleb @Amr_Teleb22
42 Followers 1K Following
SENTIMENT.BET @Yarpin5
521 Followers 6K Following where attention goes energy flows — https://t.co/VXxmSXOKLj https://t.co/nUCZdm27Nx
Sam @sadewal1
598 Followers 425 Following CEO @XANGOBOLT | Security Consultant | CISSP, AZURE, AWS, K8s Certified | Investor | 🇳🇬 #BlackTechTwitter #blackintech
Prashanth Writes @Prashanthblogs
0 Followers 88 Following Cybersecurity enthusiast | Threat Hunter | SIEM Specialist | Reporting and learning from vulnerabilities | All opinions are my own
Norbert @NB1r0
58 Followers 3K Following
Nawaf Alzadjali @nnnnnN80822
2 Followers 87 Following
Darwin Sancho @darwin_sancho_
360 Followers 301 Following Innovation and impact. Singing and sporting. Arts and aesthetics. He/Him/His 🙏🏽
0x2A Security @0x2asec
50 Followers 956 Following Security: the answer to the ultimate question of life, the universe, and everything.
Cyberer @Mad1ba
24 Followers 132 Following Cybersecurity freak | Threat Intel | FPL Enthusiast. I notify organizations in Nigeria about any breach or hack involving them
ThreatMirror @threatmirrorsec
12 Followers 133 Following Tracking darknet chatter, breach signals & CVE pre-echo. 🛠️ OSINT reports, previews & leak surface briefs. 🔗 [email protected]
Chris Barros Henrique... @haikurisu
0 Followers 17 Following Cybersecurity engineer doing things Mono no aware
Hussein Sherafat @Hussein_Sherafa
233 Followers 6K Following
Qasim Qlf 🧑💻... @qlfqasim
681 Followers 4K Following 🛡️Detection Engineer • Tech enthusiast • 🧙♂️ Ex-SWE @NETSOLTech • .NET • 🔍 30K+ @LinkedIn • 🎓 UET`15 • Open Source • ID: @qasimqlf
Mazapan Ricaleta @mazapanricaleta
1 Followers 55 Following
Antoine Faucher @afaucher79
18 Followers 731 Following
Gary Rafferty @garyhak2009
177 Followers 5K Following
BlackMamba @b1ack__mamba
3 Followers 186 Following
sudo rm -rf --no-pres... @Jeyso215
3K Followers 7K Following 👊Privacy Guardian | 🌍 Cyber Freedom Advocate | 🇺🇸 🚫📵Anti-Surveillance | 💪Empowering Data Sovereignty
Fateh Fathi @FatehFathi52724
2 Followers 93 Following
T1nt1n @t1nt1nsn0wy
701 Followers 4K Following Noobie H4CK3R and researcher at @qualys. Prev @pwc. Views are my own :)
Dolwin @dolwindoasd
12 Followers 330 Following
Don Kanaille @realdonkanaille
0 Followers 275 Following
JD_Codersteinersky @codersteinersky
184 Followers 4K Following Pugna contra mundum & be freed of its lies! https://t.co/NSL9Fzto0K covers some key ones. "Jn8:32 AYSKTT, ATTSMYF (KJV)" -- John O. Beaty's motto in TICOA.
buzzr@r92 @buzzrar92
1 Followers 403 Following
Ray Secrest @rcsec
718 Followers 5K Following
Olaf Schnolz @OlafSchnolz
37 Followers 148 Following Cum-Ex-Abgeordneter für den Wahlkreis 61. Hier twittert das Team Olaf Schnolz.
wazabii @Wazabii90
0 Followers 23 Following
Nasreddine Benchercha... @nas_bench
11K Followers 1K Following Detection @Splunk & @cisco | previously @nextronsystems | @sigma_hq & @magicswordio maintainer | Eternal LearnerTrends for United States
You might like
