{"id":18,"date":"2026-08-27T08:08:25","date_gmt":"2026-08-27T08:08:25","guid":{"rendered":"https:\/\/vietcybercareers.com\/?vcc_project=create-sigma-rules"},"modified":"2026-08-27T08:08:25","modified_gmt":"2026-08-27T08:08:25","slug":"create-sigma-rules","status":"publish","type":"vcc_project","link":"https:\/\/vietcybercareers.com\/?vcc_project=create-sigma-rules","title":{"rendered":"Create Sigma Rules"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Sigma is an open, SIEM-agnostic format for writing detection rules in plain YAML. Pick one behavior from your Atomic Red Team run and write a Sigma rule that would flag it, then test the rule against your own logs.<\/p>","protected":false},"excerpt":{"rendered":"<p>Write detection rules and test them against log data.<\/p>\n","protected":false},"featured_media":0,"menu_order":3,"template":"","career_family":[2],"skill":[15,13],"difficulty":[35],"class_list":["post-18","vcc_project","type-vcc_project","status-publish","hentry","career_family-blue-team","skill-detection","skill-siem","difficulty-beginner"],"_links":{"self":[{"href":"https:\/\/vietcybercareers.com\/index.php?rest_route=\/wp\/v2\/vcc_project\/18","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vietcybercareers.com\/index.php?rest_route=\/wp\/v2\/vcc_project"}],"about":[{"href":"https:\/\/vietcybercareers.com\/index.php?rest_route=\/wp\/v2\/types\/vcc_project"}],"version-history":[{"count":0,"href":"https:\/\/vietcybercareers.com\/index.php?rest_route=\/wp\/v2\/vcc_project\/18\/revisions"}],"wp:attachment":[{"href":"https:\/\/vietcybercareers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18"}],"wp:term":[{"taxonomy":"career_family","embeddable":true,"href":"https:\/\/vietcybercareers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcareer_family&post=18"},{"taxonomy":"skill","embeddable":true,"href":"https:\/\/vietcybercareers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fskill&post=18"},{"taxonomy":"difficulty","embeddable":true,"href":"https:\/\/vietcybercareers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fdifficulty&post=18"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}