InDetect FYIbyRcegan·2d agoImplementing Detection as Code as a multi-platform MSSPWhat was once considered to be a niche within a niche, Detection as Code has become a very popular method of managing detection rules…A response icon1A response icon1
InFMI Cyber Security Consulting ServicesbyDigit Oktavianto·Oct 21Adversarial Detection Engineering in the Real SOC: A Practitioner’s Guide to the ADE FrameworkThe rule that was always going to miss
Joseph Olanrewaju·Oct 9Your Detection Rules Suck (And It’s Not Your Fault): A Story of Detection-as-CodeHow security teams repeated every mistake software engineering made over fifty years, and how to stop doing it on any SIEM.A response icon1A response icon1
Pietro Romano / SecBeret·Sep 22Detection as Code for Splunk: A CI/CD Approach to Correlation Rule EngineeringPart 1 of a 3-part series on modern detection engineering. Part 2 connects this pipeline to Synthetic Attack Log Generation for Splunk…
InOSINT TeambyAdam Goss·Sep 21Detection as Code: A Pipeline That Won’t Flood Your SOCYou think your detection rules are protecting you? They might be landmines.
InITNEXTbyMostafa Moradian·Jun 29Detection-as-Code in One GitHub Action with RSigmaLint, validate, fields-drift, backtest, and ATT&CK coverage for Sigma rules in one workflow
7yr4n7·Jun 25Your SIEM Is the Bottleneck. It’s Time to Rethink Where Detection Actually Happens.The attacker moves in 6 minutes. Your SIEM detects in 51. This isn’t a tuning problem it’s an architecture problem. And the fix isn’t a…
Sabiha·Jun 7From Threat Hunting to Detection Engineering: Understanding Detection as Code Through PowerShell…As cybersecurity continues to evolve, new threats and trends constantly emerge. During a recent upskilling exercise, I came across…
Harrison Pomeroy·Apr 19Are Detection-as-Code Pipelines Overrated?As agentic capabilities continue to improve, are traditional Detection-as-Code pipelines becoming overrated?A response icon1A response icon1
Alan v·Apr 17Detection Engineering as Code (DaC) Using Wazuh: Building Scalable and Reliable SIEM OperationsAs security environments grow, so does the complexity of detection logic. In many SOCs, rules are still managed manually — edited directly…
