SIEM -- Sigma Rules
Sigma Rule Viewer
Browse community Sigma detection rules curated for Indian cybersecurity professionals. Each rule includes converted SPL and KQL versions ready to deploy.
- Detection ▼
- Investigation ▼
- Red Team ▼
- AI & Quantum ▼
- Governance ▼
- Cloud Security ▼
- Bootcamps ▼
- Career & Tools ▼
- News LIVE
- 🔥 Challenge
-
Live Intel ▼
Daily Threat Brief DAILYShift-start brief — updated 6 AM CVE Watch NVDPersonalised vulnerability feed CERT-In TrackerAll India advisories in one feed Research FeedProject Zero, Talos, Unit 42 & more Active Exploit TrackerCISA KEV — CVEs exploited right now Threat Actor FeedSidewinder, Lazarus, APT36 & more India Regulatory FeedRBI · SEBI · CERT-In · MeitY Dark Web MonitorSearch breach database (HIBP) Security NewsAll sources — updated daily
Type to search tools…
SIEM Hub →
Use Case LibrarySPL + KQL mapped to MITRE
Coverage MatrixVisualise MITRE coverage gaps
Query TranslatorConvert SPL, KQL, Sigma
Sigma Rule ViewerBrowse community Sigma rules
Sigma ConverterSigma to SPL / KQL / EQL
Log Volume EstimatorEstimate EPS and storage needs
SOAR Hub →
Playbook BuilderBuild automation playbooks
Playbook Templates7 ready-to-use incident templates
Alert Fatigue CalculatorAnalyst overload & ROI
SOAR ROI CalculatorBusiness case for SOAR
SOAR MaturityScore your SOAR programme
EDR / XDR Hub →
EDR Use CasesCrowdStrike, S1, MDE detections
Sysmon Config GeneratorProduction-ready sysmonconfig.xml
Alert Triage GuideStep-by-step EDR triage
MITRE → EDR MapperTechnique to rule mapping
EDR MaturityScore your EDR programme
DFIR Hub →
Windows Event ID Reference100+ Event IDs, attack indicators
Windows Artefact FinderFind artefacts by investigation goal
Registry Forensics MapShimCache, UserAssist, Run keys
Browser ForensicsChrome, Firefox, Edge artefacts
Timestamp Converter10 forensic timestamp formats
DFIR Hub →
Linux Artefact GuideAuth, execution, persistence, network
Incident Timeline BuilderMulti-source log reconstructor
Artifact Location ReferenceExact paths for 30+ artifacts
Timeline BuilderPaste logs → chronological timeline
DFIR Hub →
Memory Acquisition GuideWinPmem, LiME, VM snapshots
Volatility Command RefVol 2 & 3 plugins with syntax
Memory Forensics RefVolatility 2 and 3 commands
Forensic Tool ReferenceEvery free tool with key commands
Build with AI Hub →
Agentic AI GuideArchitecture, patterns, agent loops
Prompt Engineering Guide6 system prompts for security agents
Framework ComparisonLangChain vs CrewAI vs AutoGen
Tool-Calling PatternsSIEM, TI, EDR integrations
Human-in-the-Loop PatternsApproval gates & confidence thresholds
Multi-Agent SecurityAuth, trust boundaries, audit logging
Air-Gapped LLM DeploymentLLMs on classified infrastructure
Offline Model SelectionMatch GPU & tasks to local model
Hardware Sizing CalculatorIndia-market LLM procurement spec
Free AI Models Hub →
Ollama Local AI Setup GuideRun AI on-premise — BFSI/Gov data sovereignty
Free Security Models ReferencePhishBERT, SecureBERT, malBERT — HuggingFace
Air-Gapped SOC AI ArchitectureOllama vs vLLM — RBI/SEBI compliant deployment
Security Prompt EngineeringTested prompts for log analysis, rules, CERT-In
Free vs Paid AI ModelsBenchmark across 10 security tasks — India context
AI Security Hub →
MITRE ATLASAI/ML threat matrix
LLM Security ReferenceLLM vulnerabilities & mitigations
LLM Supply Chain AttacksMalicious models, packages, RAG poisoning
AI-Augmented TTPsHow APTs are using AI
AI Incident PlaybookIR playbooks for AI incidents
LLM App Security ReviewChecklist for LLM-based apps
Agent Security Checklist40 controls for SOC AI agents
AI Red Team BuilderStructured AI red team exercises
AI/ML Governance Hub →
AI Risk RegisterDocument and score AI system risks
AI Acceptable Use PolicyGenerate DPDP-compliant AI AUP
DPDP AI ComplianceMap AI systems to DPDP obligations
IndiaAI Mission Guide₹10,371Cr mission compliance
Quantum Security Hub →
PQC Readiness AssessmentScore your quantum crypto exposure
PQC Algorithm ReferenceML-KEM, ML-DSA, SLH-DSA guide
HNDL Threat GuideHarvest Now Decrypt Later
Crypto Inventory BuilderRisk-rate RSA/ECC for migration
Quantum Threat TimelineWhen will quantum break encryption?
Vulnerable Algorithm ReferenceRSA, ECC, AES, SHA — quantum status
PQC Migration Roadmap3-phase plan — FIPS 203/204/205
Cryptographic Agility AssessmentAgile vs brittle — migration cost
PQC TLS & Protocol ConfigNginx, SSH, VPN — deploy PQC now
Symmetric Crypto SafetyAES-256 safe. AES-128 weakened.
Sector Migration UrgencyFinance, healthcare, gov priority
Nation-State ProgramsChina, US, EU, HNDL threat intel
PKI & Certificate MigrationX.509, hybrid certs, CA roadmap
PQC Open Source Librariesliboqs, Bouncy Castle, PQClean
Red Team Hub →
C2 Framework ReferenceCobalt Strike, Sliver, Havoc, Metasploit, Brute Ratel
Active Directory AttacksKerberoasting, DCSync, Pass-the-Hash, BloodHound
Payload ObfuscationPowerShell, .NET, VBA, AMSI bypass techniques
GRC Hub →
ISO 27001:2022 ChecklistAll 93 Annex A controls
CERT-In Directions 2022Mandatory for all Indian orgs
SEBI CSCRF 2024Tier-based SEBI entity checklist
RBI IT FrameworkMaster Direction compliance
SOC 2 ToolkitType II gap assessment & evidence
PCI DSS v4.0 ReferenceSAQ selector, controls, v4 changes
Threat Modeling — STRIDEDREAD scoring & MITRE ATT&CK
Zero Trust ReferenceNIST 800-207, 5 pillars, maturity
DPDP Act 2023 GuideObligations, consent, rights, penalties
Cross-Framework MapperISO 27001, CERT-In, RBI, DPDP, SEBI
Cloud Security Hub →
Misconfiguration ReferenceS3, IAM, IMDS, SG, CloudTrail — detect & fix
AWS Security ChecklistCIS-mapped hardening controls
AWS Threat Hunting QueriesKQL & SPL for CloudTrail
Attack Path VisualiserS3 → account takeover, SSRF, ransomware chains
IAM Policy AnalyserPaste policy JSON — get risk findings
Cloud IR ChecklistAWS, Azure, GCP incident response
IAM Privilege Escalation25 AWS paths + Azure + GCP — detect & fix
Serverless Security ReferenceLambda threats, SSRF, secrets, supply chain
Cloud Pentest ChecklistEnumeration, IAM, network, data — AWS/Azure/GCP
Cloud Security Hub →
Azure Misconfiguration ReferenceBlob, AAD, NSG, PIM, logging gaps
Azure Security ChecklistCIS-mapped hardening for Azure
Azure Threat Hunting QueriesKQL for Sentinel — sign-in, activity, Key Vault
Attack Path VisualiserBlob → tenant takeover, phishing chains
Cloud IR ChecklistAzure incident response steps
Defender for Cloud ReferencePlans, alerts, tuning — GuardDuty, Defender, SCC
Azure IAM Privilege Escalation10 Azure escalation paths with detection
Cloud Security Hub →
GCP Misconfiguration ReferenceGCS, SA keys, Compute, audit logs
GCP Security ChecklistCIS-mapped hardening for GCP
Attack Path VisualiserGCS → SA key → project owner chain
Cloud IR ChecklistGCP incident response steps
GCP Security Command CentreSCC tiers, finding types, response guidance
GCP IAM Privilege Escalation8 GCP escalation paths with detection
Cloud Security Hub →
Kubernetes Security ReferenceRBAC, pod security, container escape, audit
Attack Path VisualiserCloud attack chains including K8s paths
Cloud Security Hub →
India Cloud Data LocalisationRBI, SEBI, DPDP, IRDAI, MeitY requirements
RBI Cloud GuidelinesPractical checklist for banks & NBFCs
Shared Responsibility MatrixInteractive IaaS/PaaS/SaaS × AWS/Azure/GCP
Terraform / IaC SecurityMisconfigs, tfsec/Checkov, CI/CD gate
Native Detection ReferenceGuardDuty, Defender for Cloud, GCP SCC
🎓 All Bootcamps →
SOC Analyst Bootcamp
Beginner → Expert · 365 days · 20 modules · SIEM, triage, hunting
DFIR Bootcamp
Digital Forensics & IR · 270 days · 18 modules · Volatility, KAPE, Zeek
Cloud Security Engineering
AWS · Azure · GCP · 300 days · 20 modules · IAM, VPC, DevSecOps
Threat Hunting Bootcamp
Hypothesis-driven · SIEM · Endpoint · Network · 270 days · 20 modules
🕵️ Intelligence Tracks →
Threat Intelligence Training
CTI Analyst · 240 days · 16 modules · MISP, OpenCTI, actor profiling
OSINT Masterclass
People · infrastructure · dark web · 210 days · 21 modules
⚙️ Specialist Tracks →
OT / ICS Security
Critical Infrastructure · 300 days · 18 modules · Modbus, TRITON, IEC 62443
Air-Gapped AI for Cybersecurity
Local LLM deployment · Ollama · vLLM · SIEM integration · 180 days
Bug Bounty Hunting Bootcamp
Web vulns · Recon · Burp Suite · Earning strategy · 300 days
Malware Analysis Bootcamp
Static · Dynamic · Assembly · YARA · 240 days · 18 modules
Career Hub →
Salary BenchmarkerIndian cyber salary ranges 2025
Certification RoadmapPersonalised with INR costs
Career Path ExplorerEvery cybersecurity path in India
SOC Skill AssessmentL1 → L3 adaptive knowledge test
Interview Question Bank500+ questions with model answers
Resume CheckerScore your CV for security roles
Learning ResourcesFree courses, labs, CTFs — India
Role ComparisonCompare any two security roles
All Free Tools →
Cybersecurity Glossary A–Z
328 terms — ATT&CK mapped, practitioner depth
AI Model Benchmarker
Compare local LLMs for security tasks
AI Deployment Wizard
Generate your complete air-gap AI setup
Timestamp Converter10 forensic timestamp formats
Hash CalculatorMD5/SHA256 — files never uploaded
Sigma ConverterSigma to SPL / KQL / EQL
Alert Fatigue CalculatorAnalyst overload & ROI
SOAR ROI CalculatorBusiness case for SOAR