create SOL detection rule documentation#2989
Merged
Merged
Conversation
Updated links for SOL detection rule documentation.
This document provides a step-by-step guide for creating SOL detection rules and Event Drop rules, including prerequisites, configuration steps, and related links.
Contributor
Author
|
@Sengthay, I have created this draft based only on Notion pages. I assume there are a lot of things that are wrong there but that is a starting point for discussions. |
|
Newest code from alexane-bougeardbebin-sekoia has been published to preview environment 🚀 Latest deployment was built on 2026-07-01 08:43:50 (cd5b7daaac0472bb335fb97a5a96e348709a12e9). |
Contributor
Author
|
@Sengthay this is SOL detection rule PR, as created in May, please have a look to make sure we are still align on this and to add screenshot with the new identity if possible. |
Contributor
|
@alexane-bougeardbebin-sekoia, I updated the SOL documentation and added the screenshots with the new branding |
|
Pull request was merged, preview was removed. |
Updated prerequisites and steps for creating a SOL detection rule, including clarifications on scheduling and event grouping.
Updated section title for clarity on event grouping.
Added details on configuring similarity strategies for SOL detection rules, including notes on available fields based on query results.
Removed duplicate entries for SOL detection rules and Event Drop rule.
Contributor
|
@alexane-bougeardbebin-sekoia looks good to me 🙏 |
vincentgaugry-sekoia
approved these changes
Jul 1, 2026
Sengthay
approved these changes
Jul 7, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated links for SOL detection rule documentation.