Sigma
A vendor-neutral format for writing detection rules, so detections are reviewable code that survives a change of SIEM.
Referenced by
This entry describes what the tool is for, not whether you should adopt it. For a structured comparison where you set the weights, see the decision guides.