SigmaPredator

SigmaPredator is a blue team lab that falls under the Detection Engineering category and will cover the following subjects: Sigma, Chainsaw, VsCode, Defense Evasion.

Learning Objectives

Design and validate Sigma rules to detect event log clearing techniques across CLI, WMI, and PowerShell execution artifacts.

Categories: Detection Engineering.

MITRE ATT&CK Tactics: Defense Evasion.

Tools: Sigma, Chainsaw, VsCode.

Difficulty: easy.