Skip to workspace
☰
Rules
/
Rule workspace
⌕
Search rules, techniques, actions…
Ctrl K
Saved locally
◐
DA
NEW DETECTION
Start a rule
×
Rule name
Format
Sigma
YARA
Generic SIEM
Start from
Blank rule
Process creation
Authentication anomaly
⌕
ESC