HOW WE USE DATADOG FOR DETECTION AS CODE

Summary from the TLDR InfoSec newsletter

This blog post outlines DataDog's Detection as Code (DaC) workflow, Terraform repository structure, and testing strategy. The DataDog team's process involves defining a query in the UI, exporting the detection to Terraform from the UI, committing it to source code with tests based on Stratus Red Team, and then deploying via a GitLab CI/CD pipeline. The post provides samples of rules, suppressions, tests, and Terraform configurations.