@selenakyle Don’t we sorta have detection heuristic disclosure? Suricata rules, Bro scripts, Splunk apps, Virustotal, Argus reports, etc…