Reference: Endpoint Agent Commands

Detection Logic Operators

Create a D&R Rule Using a Threat Feed

Detection on Alternate Targets

Endpoint Detection and Response (EDR)

Reference: EDR Events

Stateful Rules

Response Actions

Template Strings and Transforms

Template Strings and Transforms

Template Strings and Transforms

Template Strings and Transforms

Writing and Testing Rules

Detection and Response Examples

Soteria AWS Rules

Sigma Converter

Sysmon Comparison

Sensor Tags

Soteria M365 Rules

Reference: Schedule Events