No guide on custom rules

[djtecha]

I cannot for the life of me find any documented guide on how to create any custom rules. Does one exist or in the works?

[safchain]

For the security platform you will find the documentation here.

[djtecha]

Sort of, but nothing about writing runtime security rules.

https://docs.datadoghq.com/fr/security_platform/detection_rules/

[n06]

Hello @djtecha,

I have a couple of pieces of documentation that may help you! The first one is the documentation on how agent expressions work, the second one is a guide on writing efficient rules

These are both relatively new additions so I hope they help! If not please let us know, we're actively expanding the set of documentation available for this product.