Copilotfree, in-browser
Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Your SOC has 400 alerts nobody wrote on purpose. This is how you fix that.
What Detection Engineering Is
Your SOC has 400 alerts nobody wrote on purpose. This is how you fix that.
Writing Good Detections
A detection that cries wolf 50 times a day is worse than no detection at all.
Sigma and YARA
Write a detection once, run it on any SIEM or any file on disk.
Testing and Tuning Detections
A detection you never fired on purpose is a guess, not a control.
The Detection Lifecycle
Detections rot. The ones you shipped last year are lying to you right now.