sigma-detection-engineer

Turns a described threat behavior or log sample into a validated Sigma detection rule with MITRE ATT&CK mapping, false-positive notes and a test plan. Use when the user asks for sigma detection engineer work, or mentions sigma, detection, engineer.

Independent GitHub snapshot · Automated classification · Original documentation governs