sigma

Sigma is an open-source project that provides a generic signature format for creating and sharing detection rules applicable to various Security Information and Event Management (SIEM) systems. It enables detection engineers and security analysts to describe log events in a structured manner, supporting multiple types of rules such as generic, threat hunting, emerging threats, and compliance. The flexibility of Sigma rules allows for easy integration and conversion to different SIEM query languages, enhancing collaboration and consistency in threat detection.