Write Detections That Match
Adversary Behavior.

Detection queries mapped to MITRE ATT&CK tactics and techniques, available in KQL, Sigma, and XQL, organized by platform and data source.

PARTIAL // TRACERULES LIVE · MORE TOOLS COMING

TOOLS

TRACERULES

Detection Query Arsenal · KQL · Sigma · XQL

LIVE

MITRE-mapped detection queries spanning Execution, Persistence, Credential Access, Lateral Movement, and Command and Control, each available in KQL, Sigma, or XQL.

MITRE ATT&CK MAPPED · TACTIC-ORGANIZED · COPY-READY

LAUNCH TRACERULES →

← BACK TO H3AD-SEC PLATFORM

Write Detections That MatchAdversary Behavior.

Write Detections That Match
Adversary Behavior.