Threat desk · Defensive drafts

Ready Detection Pack

Select a sourced campaign. The system prepares Sigma, Suricata, YARA, KQL and Splunk drafts in one review package.

Loading campaign and IOC records

TECHNICAL ARCHITECTURE

Detection pack

Prepares detection content from current threat records.

Download the PDF guidePDF · 2 pages
How does it work?Method, steps, and limits are in the PDF.
  1. Input

    No input needed

  2. Method

    Turn an observation into a testable detection draft

  3. Human check

    Check the result against the source

  4. Output

    Downloadable detection content

ProcessingReads public open-source feeds