About Detection Engineering. In recent months I’ve noticed several… | by Florian Roth | Medium
In recent months I’ve noticed several attempts to define the term detection engineering and thought I should share my thoughts on this topic in a short blog post. This blog post tries to cover all possible purposes of detection engineering to develop a broad definition of the term, excluding only a few borderline areas. The term detection engineering is usually immediately associated with security monitoring. Security monitoring is often defined as the collection and analysis of events. These events describe the activity of programs and users. However, detection engineering is by no means limited to the detection of events (activity). It also includes detecting conditions (states), often used in digital forensics or incident response. I’ve also identified three different categories of detection targets. In the past, detection engineering has been only an incidental activity carried out by threat researchers, malware analysts, security monitoring analysts, incident response consultants,
About Detection Engineering Florian Roth 5 min read · Sep 11, 2022 -- 1 Listen Share In recent months I’ve noticed several attempts to define the term detection engineering and thought I should share my thoughts on this topic in a short blog post. This blog post tries to cover all possible purposes of detection engineering to develop a broad definition of the term, excluding only a few borderline areas. The Scope of Detection Engineering The term detection engineering is usually immediately associated with security monitoring. Security monitoring is often defined as the collection and analysis
Explore this link on the map →related reading
- What is Detection Engineering and Why do I Need it?cyberseccafe.com
- The dotted lines between Threat Hunting and Detection Engineering | by Alex Teixeira | Detect FYIdetect.fyi
- Build for Detection Engineering, and Alerting Will Improve (Part 3) | by Anton Chuvakin | Anton on Security | Mediummedium.com
- Navigating the crossroads of Threat Hunting & Detection Engineering | by Alex Teixeira | Detect FYIdetect.fyi
- Focus Threat Intel Capabilities at Detection Engineering (Part 4) | by Anton Chuvakin | Anton on Security | Mediummedium.com
- detection-engineering-maturity-matrixdetectionengineering.io
- Table stakes for Detection Engineering - by Zack Allendetectionengineering.net
- More on Threat Huntingtaosecurity.blogspot.com
- Mediumdetect.fyi
- Dealing with Noisy Behavioral Analytics in Detection Engineering | CMU Software Engineering Instituteinsights.sei.cmu.edu
- Intrusion Detection | Computer Securitytextbook.cs161.org
- Tuning YARA-L Rules in Chronicle SIEM | by Chris Martin (@thatsiemguy) | Mediummedium.com