Sentrix turns plain-English attack descriptions into production-ready Sigma, KQL, SPL, and EQL rules — mapped to MITRE ATT&CK, ready to deploy.
Every feature designed to take you from raw threat intel to deployed detection in minutes, not days.
Describe any attack in plain English. Sentrix maps it to MITRE ATT&CK and generates production-ready Sigma, KQL, SPL, or EQL in seconds.
Interactive coverage heatmap across all 14 tactics. One-click generation for uncovered techniques. See exactly where your detection gaps are.
Paste Windows Events, Sysmon, or Splunk results. Get instant threat detection, IOC extraction, attack timeline, and a ready-to-deploy detection rule.
Triage, investigate, and close SOC alerts with full context. Timeline, MITRE mapping, and AI-generated playbooks for every alert.
Browse 3,000+ community-contributed detection rules. Download, fork, and adapt with one click. Contribute your own rules back to the community.
Full REST API for CI/CD integration. Generate rules in your pipeline, push to Sentinel or Splunk automatically. Complete Swagger documentation.
Write a plain-English description of any attack technique, threat actor TTP, or use a pre-built template from the library.
Sentrix maps your description to MITRE ATT&CK, selects the optimal detection logic, and writes a production-ready rule with quality scoring.
Export as Sigma, KQL, SPL, EQL, or push directly to GitHub. One-click deployment to Sentinel, Splunk, or your own pipeline.
Start for free. Scale as your security team grows.
For solo detection engineers and hobbyists.
For professional detection engineers and SOC analysts.
For security teams that need SLAs, SSO, and dedicated support.
Full REST API with Swagger docs. Generate rules in your CI/CD pipeline, push to your SIEM automatically, or build detection-as-code workflows.
curl -X POST \
https://sentrix.amanpreetmatharu.com/api/generate \
-H "Authorization: Bearer ${API_KEY}" \
-H "Content-Type: application/json" \
-d '{
"prompt": "Detect LSASS credential dump",
"platform": "Microsoft Sentinel (KQL)",
"severity": "Critical"
}'
{
"rule": "SecurityEvent | where ...",
"mitre_id": "T1003.001",
"quality_score": 94
}Join 500+ detection engineers using Sentrix to ship better detections, faster.