What actually is Detection Engineering, and why do I need it?

No ratings

Presented at Crikey Con X by

Regan Carey

Detection Engineering is a relatively new concept in the blue-team cybersecurity that has exploded onto the scene with popular projects such as Sigma, and the widespread adoption of the MITRE ATT&CK framework. The only issue is, everyone seems to have a different view of what it is, and what it's not. This talk aims to define and unobscure Detection Engineering, and provide some real-world examples of how you can put it to work in your SOC to stay one step ahead of the adversaries.