// micro-tool
Sigma Detection Rule Builder
Builds a review-ready defensive Sigma-style detection from safe event fields.
How to use Sigma Rule Builder
Manual & worked example — inputs, output, limits, what it does not do, and a worked example.
Open the reference →