Proving Ground·27 min
Rain Baker
Shows how Sigma's platform-neutral rule format lets defenders write detections once and translate them to many SIEMs and EDRs.
threat-detectiondetectionhunting+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 341 talk in the archive.
1–1 of 1 talk
Proving Ground·27 min
Rain Baker
Shows how Sigma's platform-neutral rule format lets defenders write detections once and translate them to many SIEMs and EDRs.