In the network security space there's pcap-ng and yara that's pretty common as a network filter ruleset generator. There's also a lof of visual IDEs for the cr

In the network security space there's pcap-ng and yara that's pretty common as a network filter ruleset generator. There's also a lof of visual IDEs for the creation of yara rules, which tend to break it down in a flow-based graph so that the logical conditions are easier to understand. Yara is pretty flexible in what you can do with it, a lot of anti malware tools use it for detection, as well as more modern hex editors like ImHex. Older-generation tech used to use snort and its rule format, especially in the Enterprise space it's (sadly) still common.