Extra Credit

eql

Event Query Language

$pip install eql

Official docs outline

Extra Credit builds an outline of eql's docs the first time your work uses it. Until then, start at the official documentation.

All 9,553