The function you’re about to write, has already been written by someone else.. You just need to find it.

My IOCs can speak natively with your API….

Pretty soon, you find yourself back, staring at this "snort signatures" pattern problem. A small, elegant mathematical formula representing something your sensors should be detecting. All it's missing is a little normalization and a bit of an ever evolving data model behind it, representing the current state of the Internet…