Home
Product
Use Cases
▼
Solution
Pricing
About
Resources
▼
Start Free Trial
Start Free Trial
Free run · Security Operations
Build a detection for a specific behavior or protocol anomaly
Completely anonymous. No account, no card, no name.
Security Operations
is asking
This run
Step 2 of 7
What you picked
What you're catching
Who does it legitimately
What it covers
Whose voice
Who reads it
How often it would fire
It ends with a Detection you can read in full.
What you picked
Build a detection for a specific behavior or protocol anomaly
Wanted something else?
Pick again
Security Operations
·
Step 2 of 7
What kind of behaviour is it?
These need different data and different logic.
Something on the wire
A protocol pattern or an unexpected flow
An engineering action
Download, mode change, forced value
Something on a host
Process, service, file, registry
An access anomaly
Wrong account, wrong time, wrong place
An absence
Something that stopped reporting