Detection Engineering & Sigma Rules
intermediate Hands-on lab 45 min 3 tasksSubscription
Author a portable Sigma detection rule, convert it to your SIEM's query language, deploy it, and validate that it actually fires on real telemetry.
This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.
Part of these paths
Unlock this lab
Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.
Updated 2026-06-06