DETECTION-IN-DEPTH

Summary from the TLDR InfoSec newsletter

Detection-in-depth is a detection engineering concept modeled after the principle of defense-in-depth, in which security teams create detections to catch an attacker at every step of the attack chain. Detections (including out-of-the-box detections that come with a platform) must be fine-tuned to the specific environment to reduce false positives. They should be tested using threat emulation tools such as Atomic Red Team and penetration testing activities.