Detection Engineering using Sigma Rules
Sigma is a generic and open source signature format to discribe security events in order to share and detect malicious threats in your environment. In this speech we will have an overview of detection engineering, and what Sigma rules brings to the table. We will then have some practical demos using an open-source SIEM tool.
Speaker(s)
Zakaria Zaouite
Cybersecurity & DevSecOps at ENOVART
Hello, I am Zakaria Zaouite (aka Zikiriti). I'm 23 y.o. I studied at INPT, and I'm currently a cybersecurity engineer at ENOVART, helping medical organisations to secure their data. I can define myself as 'EAGER TO LEARN'. I have some knowledge in other fields such as Big Data, Distributed Systems and Machine Learning.