Using a text editor to create detection databases would be error prone and complicated, so we've deciced a code editor for just this special purpose. This editor supports syntax highlighting, code completion and context sensitive help.

Still, writing everything by hand is a lot of trouble, so we went ahead and created some import filters. With just a click, you can take the output logs of for example InCtrl5, HijackThis, SysInternals' FileMon or RegMon (with a public importer plugin interface that allows every developer to easily add more), select those entries on the list that belong to the malware you've monitored, and it will convert them to ready OpenSBI code.