Detection and Response Examples

Stateful Rules

Sigma Converter

Sysmon Comparison

Reference: Endpoint Agent Commands

Detection Logic Operators

Detection on Alternate Targets

Response Actions

Sensor Tags

Soteria AWS Rules

Soteria M365 Rules

Template Strings and Transforms

Writing and Testing Rules

Reference: Schedule Events

Reference: Error Codes

Reference: EDR Events

Create a D&R Rule Using a Threat Feed

SOC Prime Rules

Soteria EDR Rules

False Positive Rules