A FIVE YEAR RETROSPECTIVE ON DETECTION AS CODE

Summary from the TLDR InfoSec newsletter

Detection as Code is the concept of taking advantage of the codifying process when writing detections. Detection as Code does not require the use of a full programming language and goes beyond storing detections in Sigma format. The future of Detection as Code lies in utilizing test driven development and CI/CD pipelines as well as utilizing LLMs to audit and improve context around detections.