Detection Engineering Maturity Matrix
🕵️♀️ Detection Engineering Maturity Matrix 🕵️♀️ Detection Engineering Maturity Matrix Kyle Bailey (@kylebailey22) Detection engineering has long been a function of the incident response team. However, over the last several years, it has gained momentum, becoming a dedicated and more well-defined role within many security operations teams. Many great articles and presentations exist (see Medium) on the purpose of detection engineering and how it fits into a broader Security Operations team. This matrix aims to help the community better measure the capabilities and maturity of their detection function and provide a high-level roadmap for organizations looking to either build a team or expand an existing one. (https://kyle-bailey.medium.com/detection-engineering-maturity-matrix-f4f3181a5cc7) Additional Resources: - 2021 SANS Blue Team Summit: Measuring Detection Engineering Teams - 2022 BSidesSF: Detection-as-Code: Why it works and where to start You can find V1 of this matrix on G
detection-engineering-maturity-matrix detection-engineering-maturity-matrix Detection engineering has long been a function of the incident response team. However, over the last several years, it has gained momentum, becoming a dedicated and more well-defined role within many security operations teams. Many great articles and presentations exist (see Medium) on the purpose of detection engineering and how it fits into a broader Security Operations team. This matrix aims to help the community better measure the capabilities and maturity of their detection function and provide a high-level roadma
related reading
- Build for Detection Engineering, and Alerting Will Improve (Part 3) | by Anton Chuvakin | Anton on Security | Mediummedium.com
- What is Detection Engineering and Why do I Need it?cyberseccafe.com
- Focus Threat Intel Capabilities at Detection Engineering (Part 4) | by Anton Chuvakin | Anton on Security | Mediummedium.com
- The dotted lines between Threat Hunting and Detection Engineering | by Alex Teixeira | Detect FYIdetect.fyi
- Navigating the crossroads of Threat Hunting & Detection Engineering | by Alex Teixeira | Detect FYIdetect.fyi
- Mediumcyb3rops.medium.com
- Table stakes for Detection Engineering - by Zack Allendetectionengineering.net
- Building a Detection Engine Part 1 — What is a Detection Engine?medium.com
- Empowering Threat Detection With Custom Detections in EDRtruesec.com
- A SOCless Detection Team at Netflixlinkedin.com
- Perimeterperimeter.bio
- Create custom detection rules in Microsoft Defender XDR - Microsoft Defender XDR | Microsoft Learnlearn.microsoft.com