---
title: "Create a Auto Sigma job"
method: POST
path: "/v1/auto-sigma/jobs"
tags: ["Auto Sigma"]
---

# Create a Auto Sigma job

`POST /v1/auto-sigma/jobs`

Generate Sigma detection rules from observed behavioral patterns across malware samples.

## Request body

- CreateSigmaJobRequest — Request to create an Auto Sigma rule generation job from malware sample hashes.
  - `name` string, required — The name of the Auto Sigma job.
  - `query` string, required — The query used to select files to build rules for
  - `start_date` string, date, required — Earliest date to include in the query (cannot be before 2023-11-01)
  - `end_date` string, date — Latest date to include in the query, defaults to today in UTC

## Response `200`

Successful Response

- CreateJobResponse — Response confirming creation of a rule generation job with its assigned ID.
  - `job_id` string, required

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Page not found

---

[API](https://skmtc.net/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.net/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/revisions/c8c2f68d8b60/schema)