Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

Detection-as-Code CI/CD pipeline for modern security operations (SIEM, EDR, XDR, ...)

Detection Wizard brings YARA, Suricata, Sigma, Sysmon, QRadar, Splunk, and IOCs into one powerful interface for powerful rule management and threat detection.