Sigma rules

If a sample matched any of our open source community Sigma rules , you will see the following section on the file report:

Sigma Rules showed in a file report

  1. Number of matching Sigma rules of all the different severities.
  2. Number of matching Sigma rules of this specific severity.
  3. Sigma rule name.
  4. Sigma rule description.
  5. View the Sigma rule.
  6. View the context list of all the matching events.
  7. Search other files matching this Sigma rule using VirusTotal Intelligence.

If you click on the Sigma View rule icon you will see the following details:

Sigma Rules details

  1. Copy the Sigma rule to the clipboard.
  2. Search other files matching this Sigma rule using VirusTotal Intelligence.
  3. The full Sigma rule definition.