DETECTION ENGINEERING: PRACTICING DETECTION-AS-CODE

Summary from the TLDR InfoSec newsletter

This is part one of an ongoing series on implementing detection-as-code (DaC). It introduces core concepts such as the detection development life cycle (DDLC) and components of DaC, such as version control, code review, testing, and CI/CD pipelines. Organizations that embrace DaC can collaborate more easily, have more consistent, efficient, and higher quality detections, have better documentation, and can scale more effectively.