Threat Detection

Process improvements

• Capturing Detection Ideas to Improve Their Impact
• Prioritization of the Detection Engineering Backlog

Building Detection

• On Detection: Tactical to Functional series
• Procedural Detections to Uncover PsExec Style Lateral Movement
• Hunting & Detecting SMB Named Pipe Pivoting (Lateral Movement)

Detection rulesets

• Elastic
• Sigma
• Chronicle

Foundational

• Detection Engineering Pocket Guide

Detection Testing

• The Validated Canary: Our validation philosophy
• Applying test-driven development to detection engineering