Hunting for Hackers with Sigma Rules

Sigma: sigmahq.io/
Nas Twitter: / nas_bench
Nas Blog: / nasbench
Free Cybersecurity Education and Ethical Hacking
🔥RUclips ALGORITHM ➡ Like, Comment, & Subscribe!
🙏SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎FOLLOW ME EVERYWHERE ➡ jh.live/discord ↔ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware

[@jayinfosec]

There is a lot of haters on Sigma... Nas even said, "many people tell him he isnt good at detection engineering" - meanwhile, every vendor and enterprise is using their rules.... Sigma is freakin awesome!!

[@imveryhungry112]

sigma sucks. it looks like they4re trying to tailer it to just work for very specific vendors. Fuckin lame.

[@xCheddarB0b42x]

This was fantastic upload. Can't wait to play with these detection rules. Thank you both!

[@stunnx4421]

This was great! Thanks, both of you!

[@hamidb75]

This was great and very informative for detection, Thanks a bunch to both.

[@bing_crilling8981]

patrick bateman cybersecurity

[@SQUIFFYx17]

😂😂😂

[@user_9f47l38]

I love that movie

[@HeyDudee]

John You da best 🔥🔥

[@demotedc0der]

this is literally a next level type of detection system

[@crusader_]

Banger thumbnail

[@xakcisx]

So sigma

[@KCM25NJL]

I guess the obvious question now, is what would a threat actor do to fly under the sigma radar?

[@xCheddarB0b42x]

Fuzzing or other obfuscation and also patience. Separate actions with time.

[@squid13579]

Full time: Batman
Part time : cyber security😎

[@Wca2e9315]

Can you hunt the Lazarus syndicate?

[@Hybrid_Netowrks]

John can Sigma support in converting AIX binary logs into Splunk format?

[@-robotsea-6846]

John, I swear all I hear is Seth Rogan when you are talking. Man I'm dying over here. But long LIVE sigma. Haters gonna hate.

[@SzaboB33]

Sigma rules! XD

[@everypizza]

🗿 phonk security

[@Sudhanshu0761]

Nice

[@Cruciblecoder]

My name is Aurora which made me a little confused when I kept hearing/seeing it

[@MysteryMan159]

Still waiting for vim plug-ins exploits 😎

[@alkassirabumustafa7875]

Hi

[@Revoku]

a bunch of streamers/youtubers are going on about call of shames anti-cheat acting like it has malware, imo you should have a nosy at it, bet you can sort out all the drama in no time flat

[@imveryhungry112]

How the f do you convert these to like sql queries? Noone will ever get to the point.

[@syedbarkath6960]

John why the quality and presentation of the video changes if you are with other hackers? That s need to be same.

[@mauritaniainjector3736]

Talk on palastin 😢

[@stickysimon0379]

Teach us how to write a simple computer code for python and windows

[@amirhosseinamiran]

Thanks for content ❤❤❤
I can hack just for you man

[@user-sm1rs5ug5e]

Second 😂

[@user-jf5ck1ym9u]

Firs

[@Gyhvthhfdcvv]

first

[@xakcisx]

No

[@user-jf5ck1ym9u]

I am first