About Sigma Rule Library
Sigma Rule Library is an independent community interface for exploring rules from theSigmaHQ repository. It is not affiliated with or endorsed by SigmaHQ. The site is fully static: the catalog is rebuilt from the upstream repository on a schedule, and no backend, account or tracking is involved.
Data source
- Repository
- SigmaHQ/sigma(branch master)
- Source commit
- da9bb07d642a
- Last sync
- 2026-08-19 03:59:09 UTC
- Imported rules
- 3,783(0 files failed to import)
Licenses and attribution
- Sigma rules belong to their respective authors and are distributed under theDetection Rule License of the SigmaHQ repository. Individual rules may declare their own
licensefield, shown on the rule page. - The code of this website is licensed under theMIT License and lives atcereZ23/sigma-rule-library.
- MITRE ATT&CK® is a registered trademark of The MITRE Corporation. ATT&CK technique names on the coverage page come from the publicattack-stix-data dataset.
How it works
At build time the site shallow-clones the SigmaHQ repository, parses every rule file, and generates a static page for each rule plus a compact client-side search index. A scheduled GitHub Actions workflow checks the upstream repository daily and republishes the site when new commits land. Rule YAML is treated strictly as untrusted data: it is never executed, and it is always rendered escaped.