Mohlo by sa vám tiež páčiť

Informovať o naskladnení knihy

Viac informácií o knihe Practical Detection Engineering with Sigma

• Parametre knihy
• Anotácia kniha
• Obľúbené z iného súdka

Nákupom získate 101 bodov

Anotácia knihy

Write Once, and Detect Everywhere- Practical Sigma Rules for Modern SOCs

Book Description

Practical Detection Engineering with Sigma is a hands-on guide to building, testing, and operationalizing modern detections in real SOC environments.

The book walks you step by step through the full detection engineering lifecycle-from understanding Sigma fundamentals to writing structured rules and deploying them across SIEM and XDR platforms.

What you will learn

● Design and write structured, maintainable Sigma rules for diverse log sources and enterprise environments.

● Translate adversary techniques into behavior-based detections, aligned with MITRE ATT&CK tactics and techniques.

● Convert vendor-agnostic Sigma rules into optimized SIEM and XDR platform-specific queries.

● Validate and test detections using real telemetry, simulated attacks, and threat emulation frameworks.

● Reduce false positives through better logic design, field normalization, and contextual enrichment.

● Implement scalable detection engineering practices using Git-based versioning, automation, and CI/CD pipelines.

Table of Contents

1. Understanding Sigma and Its Importance

2. Anatomy of a Sigma Rule

3. Sigma Rule Logic and Conditions

4. Creating Rules for Windows Logs

5. Creating Rules for Linux and Network Logs

6. ATT&CK Mapping and TTP-Based Detection

7. Threat Simulation and Rule Testing

8. Sigma Rule Anti-Patterns and Best Practices

9. Real-World Detection Use Cases

10. Sigma Rules in SOC Workflows

11. Converting Sigma to SIEM Queries

12. Backend Limitations and Field Mapping Challenges

13. Automating Detection Delivery with CI/CD

14. Managing Rule Packs and Rule Versioning

15. Threat Hunting with Sigma

16. Intelligence-Driven Detection Engineering

17. Sigma in Open Source XDR

18. The Future of Sigma and Detection-as-Code

       Appendices

       Index

Parametre knihy

• Celý názov: Practical Detection Engineering with Sigma
• Autor: Wojciech Ciemski
• Jazyk: Angličtina
• Väzba: Brožovaná
• Počet strán: 450
• EAN: 9789349887978
• ISBN: 9349887975
• ID: 52744695
• Nakladateľ: Orange Education Pvt Ltd
• Hmotnosť: 769 g
• Rozmery: 235 × 191 × 23 mm
• Dátum vydania: 24. May 2026

---

---

---