Which type of signature engine is best suited for creating custom signatures that inspect data at OS

Which type of signature engine is best suited for creating custom signatures that inspect data at OSI Layer 5 and above?

A.
Atomic

B.
String

C.
Sweep

D.
Service

E.
Meta

F.
Flood