Sigma is a YAML-based generic signature format that abstracts detection rules away from vendor-specific query syntax. Write your detection logic once in Sigma, then convert it to Splunk SPL, Microsoft ...