This repository contains detection rules and automation pipelines for:
- YARA-L (Chronicle)
- Splunk SPL
- KQL (Microsoft Defender)
- Detection-as-Code structure
- GitHub Actions validation pipeline
- Organized rule categories
To simulate real-world detection engineering workflows and CI/CD pipelines.