Detection Engineering
Sigma Filters and Environment-Specific Tuning
Use Sigma filters as explicit, governed overlays that separate shared detection intent from environment-specific exclusions without hiding changed scope.
Tag
Sigma
Sigma concepts and practices used in modern detection engineering.
2 resources
Resources in this tag
Browse all resources
Detection Engineering
Sigma 2.1 Correlation Rules
Understand Sigma 2.1 correlation as stateful reasoning over related events, with explicit aliases, grouping, windows, order, cardinality, and backend limits.