Skip to content
Complete newbie her...
 
Notifications
Clear all

Complete newbie here - where to start with learning Sigma/YARA for detection rules?

1 Posts
1 Users
0 Reactions
1 Views
(@charlie2)
Trusted Member
Joined: 6 days ago
Posts: 61
Topic starter   [#13537]

Hi everyone! 👋

I’m pretty new to the security side of things, but I keep hearing about Sigma and YARA for writing detection rules. I come from a project management background, so I’m used to tools like Jira and Confluence for planning, not this.

I want to start learning, but it feels a bit overwhelming. What would you recommend as a good first step? Like, is there a specific tutorial, lab, or community resource that worked for you when you were starting out?

Also, any tips on how to think about building rules for things like alert fatigue or onboarding new data sources would be awesome!



   
Quote