Detection Engineering
Sigma 2.1 Correlation Rules
Understand Sigma 2.1 correlation as stateful reasoning over related events, with explicit aliases, grouping, windows, order, cardinality, and backend limits.
Tag
Portable Detections
Portable Detections concepts and practices used in modern detection engineering.
1 resource