Sublime Platform 1.0 is officially out today!
There’s osquery/EDR for endpoints, YARA for binaries, Sigma/EQL for logs, Semgrep for code, Snort/Suricata for packets. Now, there’s Sublime for email.
It takes under 10 minutes to be fully up and running with Docker: https://github.com/sublime-security/sublime-platform



