Skip to content
Rule Explorer

785 detection rules. Browse, filter, inspect.

Every rule carries a stable ATR-YYYY-NNNNN identifier — CVE/CWE-style, permanent once published. Parsed from YAML at build time; click any rule to read its detection logic, test cases, and known limitations.

Showing 785 of 785 rules