<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Threat-Hunting on Vibe Coding</title><link>https://vibecoding.rest/tags/threat-hunting/</link><description>Recent content in Threat-Hunting on Vibe Coding</description><generator>Hugo</generator><language>en</language><atom:link href="https://vibecoding.rest/tags/threat-hunting/index.xml" rel="self" type="application/rss+xml"/><item><title>Threat Hunting with Sigma Rules</title><link>https://vibecoding.rest/skills/threat-hunting-sigma/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://vibecoding.rest/skills/threat-hunting-sigma/</guid><description>&lt;p&gt;This skill uses Sigma detection rules — a vendor-neutral format for describing log-based threat signatures — to hunt for suspicious activity and analyze security events.&lt;/p&gt;&#10;&lt;h2 id="why-a-skill-for-this"&gt;Why a skill for this&lt;/h2&gt;&#10;&lt;p&gt;Sigma&amp;rsquo;s rule format is expressive but verbose to write and match by hand across large event logs. A skill that already knows the format turns threat hunting into a repeatable query task instead of a manual log-reading exercise.&lt;/p&gt;</description></item></channel></rss>