SigmaPredator

SigmaPredator is a blue team lab that falls under the Detection Engineering category and will cover the following subjects: Sigma, Chainsaw, VsCode, Defense Impairment.

Learning Objectives

Design and validate Sigma rules to detect event log clearing techniques across CLI, WMI, and PowerShell execution artifacts.

Categories: Detection Engineering.

MITRE ATT&CK Tactics: Defense Impairment.

Tools: Sigma, Chainsaw, VsCode.

Difficulty: easy.