From Dev.to
One YAML rule, any SIEM: introducing DetectForge
Every detection team I have talked to ends up in the same place: the same detection logic written four times. Once for Splunk, once for Elastic, once for Sentinel, once for the in-house thing nobody w...
