About Detection Engineering. In recent months I’ve noticed several… | by Florian Roth | Medium
In recent months I’ve noticed several attempts to define the term detection engineering and thought I should share my thoughts on this topic in a short blog post. This blog post tries to cover all possible purposes of detection engineering to develop a broad definition of the term, excluding only a few borderline areas. The term detection engineering is usually immediately associated with security monitoring. Security monitoring is often defined as the collection and analysis of events. These events describe the activity of programs and users. However, detection engineering is by no means limited to the detection of events (activity). It also includes detecting conditions (states), often used in digital forensics or incident response. I’ve also identified three different categories of detection targets. In the past, detection engineering has been only an incidental activity carried out by threat researchers, malware analysts, security monitoring analysts, incident response consultants,
About Detection Engineering Florian Roth 5 min read · Sep 11, 2022 -- 1 Listen Share In recent months I’ve noticed several attempts to define the term detection engineering and thought I should share my thoughts on this topic in a short blog post. This blog post tries to cover all possible purposes of detection engineering to develop a broad definition of the term, excluding only a few borderline areas. The Scope of Detection Engineering The term detection engineering is usually immediately associated with security monitoring. Security monitoring is often defined as the collection and analysis
related reading
- What is Detection Engineering and Why do I Need it?cyberseccafe.com
- The dotted lines between Threat Hunting and Detection Engineering | by Alex Teixeira | Detect FYIdetect.fyi
- Build for Detection Engineering, and Alerting Will Improve (Part 3) | by Anton Chuvakin | Anton on Security | Mediummedium.com
- Navigating the crossroads of Threat Hunting & Detection Engineering | by Alex Teixeira | Detect FYIdetect.fyi
- Focus Threat Intel Capabilities at Detection Engineering (Part 4) | by Anton Chuvakin | Anton on Security | Mediummedium.com
- Building a Detection Engine Part 1 — What is a Detection Engine?medium.com
- detection-engineering-maturity-matrixdetectionengineering.io
- Table stakes for Detection Engineering - by Zack Allendetectionengineering.net
- Empowering Threat Detection With Custom Detections in EDRtruesec.com
- Identifying and Classifying Attack Techniquesmedium.com
- AI & Cyber from a Detection Engineer’s Perspective: Explainability Matters and Context is Kingcyberbuilders.substack.com
- Mediumdetect.fyi