Agent-Threat-Rules Ships 'Sigma for AI Agents': 425 Open Detection Rules With 97.1% Recall, Adopted by Microsoft AGT, Cisco AI Defense, MISP and OWASP

GitHub·high signalXBlueskyLinkedInCopy link

Agent-Threat-Rule/agent-threat-rules proposes an open detection standard for AI agents — explicitly modeled on Sigma — shipping 425 rules and claiming 97.1% recall on its benchmark. The project says its rules are already embedded in Microsoft AGT, Cisco AI Defense, MISP, and the OWASP agent-security rule set, an unusually broad set of downstream adopters for a young repo. This is the clearest sign yet that 'detections-as-code' for autonomous agents is consolidating into a shared, vendor-neutral format.