Exam

Sigma Detection Rule Technical Investigation

Subject Cyber Threat Intelligence
Format Research investigation
Duration 40 mins
Questions 8
Passing Score 75%
Created by Threat Intelligence Lab
Updated 16 August 2026
Instructions

Use SigmaHQ's official rules, log sources, and conditions documentation. Research rule semantics before answering; do not assume a Sigma rule is already a query for a specific SIEM.

About this learning content: Courses, lessons, assessments, explanations and illustrations may be created with the help of artificial intelligence. We review and check the material and do our best to avoid incorrect or outdated information, but mistakes, omissions or ambiguous questions may remain. Please verify information before relying on it for professional, security, legal or operational decisions. Read the full notice or report an issue.

Ready to take the assessment?

Sign in to answer the questions, save your result and receive a certificate when you pass.

Continue testing