Detection Rules – The DFIR Report

Detection Rules

Our Private Ruleset is curated using insights derived from Private Threat Briefs and internal cases, focusing on Sigma rules. As of January 2024, it encompasses approximately 100 Sigma rules, created from the knowledge of 40+ distinct cases. Each rule is mapped to ATT&CK and accompanied by a test example.

To receive more information on this ruleset or a quote, please Contact Us