Mohlo by se vám také líbit

Informovat o naskladnění knihy

Více informací o knize Practical Detection Engineering with Sigma

• Parametry knihy
• Anotace
• Oblíbené z jiného soudku

Nákupem získáte 95 bodů

Anotace knihy

Write Once, and Detect Everywhere- Practical Sigma Rules for Modern SOCs

Book Description

Practical Detection Engineering with Sigma is a hands-on guide to building, testing, and operationalizing modern detections in real SOC environments.

The book walks you step by step through the full detection engineering lifecycle-from understanding Sigma fundamentals to writing structured rules and deploying them across SIEM and XDR platforms.

What you will learn

● Design and write structured, maintainable Sigma rules for diverse log sources and enterprise environments.

● Translate adversary techniques into behavior-based detections, aligned with MITRE ATT&CK tactics and techniques.

● Convert vendor-agnostic Sigma rules into optimized SIEM and XDR platform-specific queries.

● Validate and test detections using real telemetry, simulated attacks, and threat emulation frameworks.

● Reduce false positives through better logic design, field normalization, and contextual enrichment.

● Implement scalable detection engineering practices using Git-based versioning, automation, and CI/CD pipelines.

Table of Contents

1. Understanding Sigma and Its Importance

2. Anatomy of a Sigma Rule

3. Sigma Rule Logic and Conditions

4. Creating Rules for Windows Logs

5. Creating Rules for Linux and Network Logs

6. ATT&CK Mapping and TTP-Based Detection

7. Threat Simulation and Rule Testing

8. Sigma Rule Anti-Patterns and Best Practices

9. Real-World Detection Use Cases

10. Sigma Rules in SOC Workflows

11. Converting Sigma to SIEM Queries

12. Backend Limitations and Field Mapping Challenges

13. Automating Detection Delivery with CI/CD

14. Managing Rule Packs and Rule Versioning

15. Threat Hunting with Sigma

16. Intelligence-Driven Detection Engineering

17. Sigma in Open Source XDR

18. The Future of Sigma and Detection-as-Code

       Appendices

       Index

Parametry knihy

• Plný název: Practical Detection Engineering with Sigma
• Autor: Wojciech Ciemski
• Jazyk: Angličtina
• Vazba: Brožovaná
• Počet stran: 450
• EAN: 9789349887978
• ISBN: 9349887975
• ID: 52744695
• Nakladatelství: Orange Education Pvt Ltd
• Hmotnost: 769 g
• Rozměry: 235 × 191 × 23 mm
• Datum vydání: 24. May 2026

---

---

---