Describe what must be detected once: the service writes equivalent patterns in every language you select, with the logic, the fields needed, positive and negative test cases, false-positive considerations and how to implement them on each platform.
Contents
1. Detection Scenario Overview
2. Technical Context
3. Detection Objectives
4. Data Sources and Required Fields
5. Detection Logic
6. Generated SPL Patterns
7. Generated KQL Queries
8. Generated Regex Expressions
9. Generated Grok / Sigma Patterns
10. Additional Selected Languages
11. Pattern Explanations
12. Test Cases and Expected Results
13. Validation Results
14. Limitations and Assumptions
15. False-Positive Considerations
16. Implementation Recommendations
What you provide
Deliverable — Its title, its author and its structure are yours: they steer what is written.
What to detect — Once: every language below is written from this.
Languages and tools — One complete pattern per language selected.
To check against — Remove any real secret or personal data first.