Tag

Sigma Rules

Published work tagged Sigma Rules.

Items2

All Categories Articles Tutorials Research Writeups

Real-Time eBPF Kernel Telemetry & Sigma Rule Synthesis for Linux Threat Detection

Real-Time eBPF Kernel Telemetry & Sigma Rule Synthesis for Linux Threat Detection **Byline:** Syed Zada Abrar **Organization:** SentinelReign & Andrax Pentes…

Syed Zada Abrar · 5 min

Article

Loading…

Andrax Pentester

Cybersecurity research, education, and tooling

All Systems Operational · Research Verified

Security Dispatches

Get notified when new 0-day disclosures and CTF writeups publish.

Email for newsletter

Intelligence

Articles
Research
Writeups
Tutorials
Security Tools
Resources

MCP Security

MCP Scanner
Server Directory
MCP Dorks Search
Browser Extension
Methodology
Scanning Policy
State of MCP
Developer API

Discovery

Search Index
Categories
Vulnerability Tags
RSS XML Feed
JSON API Feed
LLMs Knowledge (llms.txt)

Organization

About Project
Lead Researcher
SentinelReign
Platform Roadmap
Indian Armed Forces Tribute

Access

Apply as Researcher
Member Sign In
Create Account
Research Dashboard

Independent Security Network

Andrax Pentester operates as an autonomous cybersecurity laboratory under the SentinelReign research umbrella.

sentinelreign.com Our Mission

Strict Ethical Guidelines · Educational Purpose Only

Tag

Sigma Rules

Published work tagged Sigma Rules.

Items2

All Categories Articles Tutorials Research Writeups

ArticleDefensive Security

Real-Time eBPF Kernel Telemetry & Sigma Rule Synthesis for Linux Threat Detection

Real-Time eBPF Kernel Telemetry & Sigma Rule Synthesis for Linux Threat Detection **Byline:** Syed Zada Abrar **Organization:** SentinelReign & Andrax Pentes…

Syed Zada Abrar · 5 min

Article

Defensive Security

Building a Production-Grade Detection Engine in Python: Sigma Rule Transpilation, AST Parsing & Telemetry Pipelines (2026 Masterclass)

Build a zero-dependency Python 3.11+ AST detection engine that transpiles Sigma rules into Microsoft KQL, Elastic EQL, and real-time in-memory event evaluators.

Syed Zada Abrar · 13 min