Cloud SIEM Detection test

config/_default/menus/main.en.yaml

@@ -5966,6 +5966,11 @@ menu:
       parent: cloud_siem
       identifier: cloud_siem_detection_rules
       weight: 2
+    - name: Threshold
+      url: security/cloud_siem/detection_rules/threshold
+      parent: cloud_siem_detection_rules
+      identifier: cloud_siem_detection_threshold
+      weight: 20300
     - name: Signal Correlation Rules
       url: security/cloud_siem/detection_rules/signal_correlation_rules
       parent: cloud_siem_detection_rules

content/en/security/cloud_siem/detection_rules/threshold.md

@@ -0,0 +1,79 @@
+---
+title: Threshold Detection Method
+disable_toc: false
+---
+
+## Overview
+
+TKTK
+
+## How the threshold detection method works
+
+TKTK
+
+## When to use the threshold detection rule
+
+TKTK
+
+## Create a rule
+
+To create a threshold detection rule or job:
+
+1. Navigate to the [Detection Rules][1] page and click **+ New Rule**.
+1. Select whether you want to create a **Real-Time Rule**, **Scheduled Rule** or a **Historical Job**.
+1. Leave the **Threshold** option as the selected detection method.
+
+{{< tabs >}}
+{{% tab "Real-time rule" %}}
+
+### Define search queries
+
+TKTK
+
+### Set conditions
+
+TKTK
+
+### Describe your playbook
+
+TKTK
+
+### Create a suppression
+
+TKTK
+
+{{% /tab %}}
+{{% tab "Scheduled rule" %}}
+
+### Define search queries
+
+TKTK
+
+### Add custom schedule
+
+TKTK
+
+### Describe your playbook
+
+TKTK
+
+{{% /tab %}}
+{{% tab "Historical job" %}}
+
+### Define search queries
+
+TKTK
+
+### Notify when job is complete
+
+TKTK
+
+### Describe your playbook
+
+TKTK
+
+
+{{% /tab %}}
+{{< /tabs >}}
+
+[1]: https://app.datadoghq.com/security/configuration/siem/rules