Every Sigma rule is built on a simple, consistent foundation. Think of it as a blueprint for a detection. These blueprints are written in YAML, a data format that prioritizes human readability. Its clean, indentation-based structure makes it easy to see the hierarchy of a rule at a glance, without the clutter of brackets or tags.