Talon ForgeTalon Studio v1.0.2-beta
Blueprints
Reuse detection structures instead of rebuilding boilerplate — templates to start new rules from, and standards to grade them against.
Blueprints & templates
A blueprint is a reusable detection structure, versioned in the workspace repo like everything else. It comes in two kinds, so common detection shapes stay consistent across the team and nobody rebuilds boilerplate:
Templates — starting rules for the Builder. Five built-in templates are always in its Templates menu; Save current as a template… saves the draft you're working on as your own, under Talon/blueprints/. Your templates appear under Your templates in that menu and in the Library's Custom source.
Standards — a blueprint that carries a conformance spec. Save as standard on a detection's page derives the spec from that exemplar — the fields it has filled in become required, with minimums derived from it — and the standard keeps a link back to the detection it came from. Standards are stored under Talon/standards/; see Standards.
Tip
Pick your best exemplar, not your first — Save as standard derives the conformance spec from the detection you choose, so that rule becomes the bar every other detection in the workspace is measured against. You can refine the derived rules afterwards.