. Detection Engineering: Develop Sigma/YARA rules, KQL/SPL queries, and enrichment scripts. Collaboration: Work with Red Team..., Microsoft Sentinel EDR/XDR: CrowdStrike, Carbon Black, Defender for Endpoint Threat Hunting: YARA rules, Sigma, custom...
, Sigma, YARA-L, Linux/Unix, Wireshark, etc. Scripting, software development, engineering, and/or devops experience...
, Network, and more) Experience developing and deploying effective detection rules (Yara,Sigma, SQL based rules,Network...