Sigma • detection logic16 lines
Test against a sample event
Paste a JSON event and evaluate this rule before going live.
Sample event (JSON)
Result
Click “Run test” to evaluate the rule.
Backtest over history
Save the rule to backtest it against real historical events.