Skip to content

Created jq/grep detections from SIGMA rules, as comments

Austin Bollingerrequested to merge
stayingcalm/automated-incident-response:main into main
  • Please check this box if this contribution uses AI-generated content (including content generated by GitLab Duo features) as outlined in the GitLab DCO & CLA. As a benefit of being a GitLab Community Contributor, you can request access to GitLab Duo.

Any detections yaml files have comments added at the bottom, which enable analysis of audit/log files without a SIEM.

  • /detections/...*.yaml
Edited by 🤖 GitLab Bot 🤖

Merge request reports