SOCLIFE
SOCLIFE

Evidence-led security analysis

Published knowledge

Search SOC//LIFE

Detection Packs

Build a detection pack for your environment.

Choose coverage, map the telemetry you have, and export review-ready Splunk or Microsoft Sentinel detections.

  1. 1SetupCurrent
  2. 2Find your dataNext
  3. 3Choose detectionsNext
  4. 4ConfigureNext
  5. 5Review & DeployNext
1SetupCurrentChoose a platform and coverage

Set the pack scope

Choose the destination and the security behaviors this pack should cover.

Platform
Coverage

Choose a platform to begin.

2Find your dataNextComplete Setup first

Choose a platform and at least one coverage area in Setup.

3Choose detectionsNext0 selected

Complete Setup before choosing detections.

4ConfigureNextPlatform settings

Choose at least one detection first.

5Review & DeployNext0 ready · 0 validation recommended

Choose detections before reviewing the deployment-ready pack.