Workspace access
Continue to Detections
You will be taken to Detection rules once you are signed in.
Workspace access
You will be taken to Detection rules once you are signed in.
11,341 rules · 4 sources
The catalogue stays public. Your own detections need somewhere to live.
Everything you can already read stays free and public. An account adds a workspace of your own: detections you write, every revision with its fingerprint, review, and the catalogue's ATT&CK coverage and gaps — work that is yours alone until you publish it.
GreyNoise TI map IP entity to Network Session Events (ASIM Network Session schema)