Security OperationsKnowledge Base

Access our comprehensive library of security queries, detection rules, and response procedures

Press ⌘ + K to search
156 queries

Sumo Logic CIP

Cloud SIEM & Observability Queries

Endpoint Security
Network Detection
Cloud Security
Compliance
243 queries

KQL Queries

Microsoft Sentinel & Defender Queries

Threat Hunting
Incident Response
Security Monitoring
Analytics
128 queries

LogScale Queries

Falcon LogScale Search Patterns

Log Analysis
Performance Monitoring
Security Events
Dashboards
312 queries

Splunk Queries

SPL Queries & Dashboards

Security Operations
Threat Detection
SIEM Rules
Compliance
184 queries

SentinelOne Queries

Deep Visibility & Hunting Queries

EDR
Threat Hunting
Incident Analysis
Response Actions
95 queries

Attack Mitigation

Response & Remediation Steps

Ransomware
Phishing
Malware
Zero-Day Threats
147 queries

Rule Finetuning

Detection Rule Optimization

False Positive Reduction
Alert Tuning
Rule Development
Best Practices
1,265+
Total Queries
98%
Detection Rate
7
Platforms Supported
24/7
Expert Support