Видео

Summary from the website: Successful security operations teams build and maintain custom detection and response capabilities that are tailored to their organization's objectives. When doing so, many organizations fall into the same pitfalls, such as poor documentation, pockets of tribal knowledge, and lack of quality control in detection logic. This results in poor and/or inconsistent detection and response capabilities. In this presentation, we will discuss how we have built and matured our detection engineering lifecycle based on proven software engineering methodologies. Key components we will discuss will include building custom IDE tools to support engineers, incorporating unit testing, requiring documentation before deployment, and dev/staging/production environments. By implementing this model, organizations can create more robust, consistent, and sustainable detection engineering practices that will allow them to develop and deploy new capabilities quickly and safely.

😂 Promo_SM