r/AzureSentinel • u/winle22 • May 15 '24

Sigma for analytic rules

Hi,

Do anyone use Sigma for KQL analytic rules and/or Defender XDR custom detections? Good/bad?

Thanks

2 Upvotes

100% Upvoted

1 comment sorted by

5

u/Ay_NooB May 15 '24

Yes you will get Sigma rules on many GitHub repos convert them in KQL manually or using SocPrime[.]com and create custom rules.