(Optional) Upload your existing detections

Upload your existing detections using a CSV file.

This is an optional step and if you choose not to do it now, you can come back and do this later at any point in time.

If you have existing detections, you can export them to a CSV file, then import the CSV into Anvilogic. Doing this helps you get an idea of what your MITRE coverage looks like, so you can address and strengthen the areas where you need additional coverage.

The CSV file must have the title, description, and search of the existing detection. See Import existing rules for instructions to import the CSV file into Anvilogic. This document also describes how to properly format the CSV file when you create it.

Next step

Review and deploy recommended content