← Back to Blog

Tag: Detection Content

A Deployed Rule Is Not a Working Rule: How to Tell the Difference 7 min read Sigma A Deployed Rule Is Not a Working Rule: How to Tell the Difference by SOC Prime Team Build versus buy: the detection-engineering cost model 11 min read Build versus buy: the detection-engineering cost model by Brandi Moore ATT&CK-Based Detection for Federal Agencies 12 min read ATT&CK-Based Detection for Federal Agencies by Brandi Moore Detection Rule Portability 9 min read Detection Rule Portability by Brandi Moore Regulatory detection obligations: DORA, NIS2, PCI DSS 4.0, SEC 12 min read Regulatory detection obligations: DORA, NIS2, PCI DSS 4.0, SEC by Brandi Moore Measuring MITRE ATT&CK detection coverage: what the percentage counts and what it hides 8 min read Sigma Measuring MITRE ATT&CK detection coverage: what the percentage counts and what it hides by Brandi Moore Free vs. Curated Detection Rules: What Actually Changes When You Pay 11 min read Free vs. Curated Detection Rules: What Actually Changes When You Pay by Brandi Moore Detection Validation and Decay 14 min read Detection Validation and Decay by Brandi Moore Multi-Tenant Detection Operations for MSSP and MDR Providers 11 min read Multi-Tenant Detection Operations for MSSP and MDR Providers by Brandi Moore Cribl LogTotal Sanitizer: Pseudonymize Sensitive Log Data Inside Cribl Stream 3 min read Cribl LogTotal Sanitizer: Pseudonymize Sensitive Log Data Inside Cribl Stream by SOC Prime Team