Is it better than a sigma rule? https://lemmy.blahaj.zone/pictrs/image/e97ebde4-4d88-4f06-b9a3-916125ad3544.jpeg