Creating a Custom Detection Rule

The following sections describe the methods used to create a custom detection rule:

Creating a Custom Detection Rule from Inventory of “Component” Type
Creating a Custom Detection Rule from Scratch