The Mysteries of Detection Engineering: Revealed!
Aug 16, 2021•30 min•Season 1Ep. 27
Listen to this episode in Metacast mobile app
Don't just listen to podcasts. Learn from them with transcripts, summaries, and chapters for every episode. Skim, search, and bookmark insights. Learn more
Episode description
Guest:
- Keith McCammon, Co-founder and Chief Security Officer, Red Canary
Topics:
- What is Detection Engineering? How it differs from just building rules/analytics?
- How to convert threat intelligence into detections?
- How to tell good detections from bad? And perhaps also good from great?
- How to test detections in the real world?
- Anything special about building detections for cloud environments?
- What do you think is the role of “rule-less” (such as ML) detections? Is “ML unicorn cavalry” coming?
Resources:
For the best experience, listen in Metacast app for iOS or Android
Open in Metacast