of compromise (IOCs), utilizing Kusto Query Language (KQL) and YARA rules. Act as a primary technical advisor to Government... or highly restricted networks, including the creation of OpenIOC and YARA rules. Operating System & Forensic Knowledge...
mitigations. Proficient in using structured queries to extract data from logs and in developing detection signatures (e.g., YARA...
, PowerShell, or Bash for automation, data parsing, and custom tooling. Experience writing detection logic using SIGMA, YARA...
. This could take the form of Yara, Sigma or Regular Expressions. Ability to define security requirements and drive project deliverables...
methods, and produce Yara signatures and technical reports that translate findings into action. You'll partner closely..., and firmware. Create Yara signatures and partner closely with detection engineers to develop novel, ICS-specific threat detections...
across platforms is strongly preferred. Examples may include Sigma, KQL, SPL, XQL, YARA-L, EQL, SQL, YARA or comparable languages...
signatures (Suricata, YARA, internal analytics) and partner with product engineering to identify and close gaps in the Dragos... constructs. Experience developing YARA, Snort, Suricata or Zeek detections rules. Experience working with an operations center...
with detection frameworks and tooling such as YARA, SIGMA, Suricata, or similar rule-based detection methodologies. Strong...
. Create and tune detections (e.g., SIEM/SOAR, EDR) using intelligence signals (TTPs, behaviors, YARA/Sigma where applicable..., persistence/discovery behaviors) and creation of detections (e.g., Sigma/YARA) is a plus. Experience producing finished...
Security certifications Splunk SOAR (Phantom) Detection-as-Code Sigma and YARA CrowdStrike or Microsoft Defender... YARA CrowdStrike Microsoft Defender FedRAMP NIST RMF FISMA CMMC Public Trust Legal Disclaimer Cherokee Federal...