Detection Engineering: A Modern Approach for Cybersecurity 

Overview 

In the evolving landscape of cybersecurity, traditional detection methods often fall short against sophisticated threats. This webinar introduces a structured approach to detection engineering, emphasizing the importance of behavior-based detection, continuous improvement, and the integration of frameworks like MITRE ATT&CK. 

Key Topics 

• Detection Lifecycle: Understanding the phases from discovery to continuous tuning. 
• Reducing False Positives: Strategies to minimize alert fatigue and enhance analyst efficiency. 
• Framework Integration: Leveraging MITRE ATT&CK and the Pyramid of Pain for effective detection prioritization. 
• Detection-as-Code (DaC): Implementing scalable and testable detection rules using formats like Sigma and TOML. 
• Adversary Emulation: Validating detection capabilities through simulated attack scenarios.
  

Who Should Attend 

Security professionals including SOC analysts, threat hunters, detection engineers, and cybersecurity managers seeking to enhance their organization’s detection capabilities.