A real published rule (T1003.001 LSASS access), annotated field by field.
Sigma Rules for MITRE ATT&CK
Sigma detection rules mapped to MITRE ATT&CK v19.1 technique IDs, filterable by platform, data source, and data component.