capabilities.work

Validate and deploy a Nebulock detection rule

A 3-step recipe with Nebulock. We can help you get access.

Recipe · 3 steps

Validate and deploy a Nebulock detection rule

with Nebulock · Threat Detection & Response Management

Validate a Sigma rule, create it inactive, then flip it to active.

  1. validateRule
  2. createRule
  3. activateRule
What you'll need to have ready
  • rule_type
  • content
For your developer

Arazzo workflow nebulock:validateAndDeployRule, 3 operations: validate_rule_public_api → create_rule_public_api → update_rule_public_api. Specs on APIs.io.