🛡️SOC & Threat Intel

Sigma Rule Builder

Build Sigma detection rules interactively. Fill in the fields and get a ready-to-use YAML rule for your SIEM. Sigma is the standard open format for SIEM detection rules. This free soc & threat intel tool runs entirely in your browser — no data leaves your device, no account required, and it keeps working offline once the page has loaded.

sigmasiemdetectionruleyamlthreathuntingsplunk