Not-Equal Modifier for Sigma Rules
Improvement
Sigma rules you deploy to AlphaSOC can now use the neq field modifier, so a selection such as User|neq: SYSTEM matches any other value without a separate negated filter. It behaves as it does in pySigma, so rules that use it evaluate the same way here as on other Sigma backends.