BlueMarket
  • Home
  • Marketplace
  • Explore
  • Forums
  • Communities
  • Projects
  • Profile
  • Friends
  • Messages
  • Library
  • Wishlist
  • Wallet
  • My Store
Blue+Private communities & more

Demo data

RulesAffiliatesSupport

/
Sign inJoin
  • Home
  • Market
  • Explore
  • Forums
  • Library
Marketplace/Cybersecurity/Defensive Security
cybersecurity

Defensive Security

Blue Team Detection Pack

120 tested Sigma & YARA rules mapped to MITRE ATT&CK.

4.9(44)·170 sales
€12.00
BUY NOW
Version
2026.3
Updated
Nov 3, 2026
License
Team License
Category
Cybersecurity

Report product

What's wrong?

Reports are confidential. Abuse of the report system may lead to account restrictions.

N

nullbyte

Verified Seller

★ 4.8 · 960 sales · 3 products

Files are malware-scanned before release and delivered through expiring, account-bound download links.

OverviewWhat's includedRequirementsChangelogLicenseReviews (44)

Overview

A curated, tested set of Sigma and YARA detection rules for common intrusion techniques, each mapped to MITRE ATT&CK with triage notes and false-positive guidance.

Features

  • 120 rules
  • ATT&CK mapping
  • Triage notes
  • Quarterly updates
SigmaYARAElasticSplunk#sigma#yara#detection#blue-team#mitre

What's included

  • detection-pack-2026q3.zip400 KB Scanned

Requirements

  • A SIEM supporting Sigma conversion, or YARA 4.x

Changelog

  1. v2026.3CurrentNov 3, 2026
    • – 18 new rules
    • – Updated ATT&CK v16 mapping

License

Team License

Up to 10 seats within one organization. Commercial use permitted. No redistribution.

Reviews

4.9 / 5

44 verified reviews

  • 5★89%
  • 4★9%
  • 3★2%
  • 2★0%
  • 1★0%

Only verified purchasers can leave a review.

No written reviews yet.

Defensive Security

Blue Team Detection Pack

120 tested Sigma & YARA rules mapped to MITRE ATT&CK.

4.9(44)·170 sales
€12.00
BUY NOW
Version
2026.3
Updated
Nov 3, 2026
License
Team License
Category
Cybersecurity

Report product

What's wrong?

Reports are confidential. Abuse of the report system may lead to account restrictions.

N

nullbyte

Verified Seller

★ 4.8 · 960 sales · 3 products

Files are malware-scanned before release and delivered through expiring, account-bound download links.

Related products

CTF

CTF Recon Workbench

nullbyte
4.8(102)391 sales
€9.99
Educational

OSINT Methodology Notebook

nullbyte
4.8(211)2.9K sales
Free