Improving threat detection with Sigma correlations

This blog post announces Sekoia.IO's native support for Sigma Correlations in its real-time detection engine, describes why STIX/STIX patterning was insufficient (notably scoping and search limitations), explains the shift to ECS, and provides example correlation rules (temporal, event_count, value_count) and notable implementation differences such as group-by support and aliases.