opensearch-detection-engineer

【效率与协作】OpenSearch detection engineering: SIGMA authoring, query DSL translation, MITRE ATT&CK mapping, anomaly detection, correlation rules, SOC incident escalation. Use for SIEM detection authoring, threshold tuning, alert validation, and Tier-1/Tier-2 escalation workflows.

独立 GitHub 快照 · 自动分类 · 以原作者文档为准