Where do Detection Ideas Come From?
Brief
This article was co-authored by Gary Katz and Jason Deyalsingh
Recent studies have shown that genAI is commoditizing the creation of detection rules. This elevates the minimal qualifications of the detection engineer from simply creating detections to identifying where to focus efforts, implementing more robust detection capabilities and performing the research and tooling to support them.
This article will focus on the first of these skillsets, identifying opportunities to create detections which align to your organization’s needs.
In the previous article, Critical Asset Analysis for Detection Engineering , we looked at one approach for prioritizing tasking for a detection engineering team.