Detection engineering

Detection rules that tell you which logs they need

Sigma-style rules with MITRE ATT&CK mapping, the log fields each one depends on, and the audit policy that produces them — plus interactive incident walkthroughs and a purple-team simulator to test the rules against real events.

Built by Ajinkya Gandhwale, Detection Engineer · LinkedIn · GitHub

Try the simulator Walk an incident

Detection rules across 11 log sources

Incident write-ups, initial access to impact

Interactive tools: the simulator and 2 incident walkthroughs