Detection rules define conditional logic that is applied to all ingested logs. When at least one case defined in a detection rule is matched over a given period of time, Datadog generates a security signal.
Datadog provides out-of-the-box (OOTB) detection rules to flag attacker techniques and potential misconfigurations so that you can immediately take steps to improve your security posture. Datadog continuously develops new default detection rules, which are automatically imported into your account.
Filter by Logs Detection to see the Security monitoring rules, Workload Security to see Cloud Security Workload rules, or Cloud Configuration to see the Cloud Security Posture rules.