Sigma 101

Sigma 101 is a blue team lab that falls under the Detection Engineering category and will cover the following subjects: Sigma, Execution, Persistence, Privilege Escalation, Stealth, Defense Impairment.

Learning Objectives

Analyze suspicious logs to author custom Sigma rules that detect lateral movement techniques within a SIEM environment.

Categories: Detection Engineering.

MITRE ATT&CK Tactics: Execution, Persistence, Privilege Escalation, Stealth, Defense Impairment.

Tools: Sigma.

Difficulty: medium.