DETECTION ENGINEERING AT SCALE: ONE STEP CLOSER

Summary from the TLDR InfoSec newsletter

Part two of a series describing how Sekoia develops detection rules using Sigma to identify TTPs. Sekoia implements the Alerting and Detection Strategy Framework which focuses heavily on testing and documentation. Sekoia augments their automated documentation with comprehensive testing that tests syntax, test coverage, and both production and pre-production regression testing.