#siem

CrowdStrike Query Language (CQL) for LogScale & Humio

xecurelogic

A Visual Studio Code extension for CrowdStrike Query Language (CQL/LQL) in Falcon LogScale and Humio. Zero-runtime, fully auditable syntax highlighting and snippets — no executable code, no dependencies, no network access.

Detection-as-Code Copilot

yrhelm

In-editor authoring for Sigma detections: false-positive lints, ATT&CK validation, Sigma-to-KQL compile, and offline backtest.