[SANS Institute and Anvilogic Present] The 2025 State of Detection Engineering Report
Join the waitlist
Skip to main content
Breaking Down the Detection Engineering Lifecycle: Deep Dive into Threat Research

#16 Breaking Down the Detection Engineering Lifecycle: Deep Dive into Threat Research

February 15, 2024

Get the Giveaway

Join Kevin Lo, Sr. Threat Researcher at Anvilogic, for a deep dive session on all things threat research and how it plays into the entire detection engineering lifecycle.

We'll cover:

  • Lessons learned & the most trending threats from 2023
  • Providing valuable & actionable insights to help your counterparts build robust detections & high-fidelity alerts
  • Top sources to follow & use for threat research
  • Switching roles between different functions of the detection engineering lifecycle

‍

Episode Host Headshot
Kevin Lo
Sr. Threat Researcher, Anvilogic

Additional Resources

Launch the Snowflake Lab
Anvilogic for Snowflake
Detection at the Apex: A Better Threat Detection Strategy
Podcast

More Episodes

Top 10 KQL Queries Every DE Should Know

December 12, 2024

#39 Top 10 KQL Queries Every DE Should Know

In this episode, Alex sits down with Sergio Albea, an accomplished Threat Hunter, Researcher, User Behavior Analyst, and Senior Cloud Security Engineer/Architect, to share a must-have resource for detection engineers: the Top 10 KQL Queries of 2024.

Watch Now and Get the Giveaway
Typo Trouble: How LLMs Can Outsmart TYPOSQUATTING Attacks

December 5, 2024

#38 Typo Trouble: How LLMs Can Outsmart TYPOSQUATTING Attacks

In this episode, we chat with the brilliant Mike Hart, a data scientist with a mission: to outsmart the sneaky world of typosquatting attacks. Just in time for the holiday shopping frenzy, we explore how his open-source project leverages LLMs to safeguard users from clicking on malicious look-alike links.

Watch Now and Get the Giveaway
Maturing SecOps with Detection-as-Code

November 21, 2024

#37 Maturing SecOps with Detection-as-Code

Ever feel like detection rule management is stuck in the Stone Age? This episode with Wade Wells a DE powerhouse trailblazing DaC in the industry is all about leveling up with Detection-as-Code—a game-changing way to manage threat detection that ditches the manual grind. We’ll break down how using code and automation can bring collab, speed, and structure to your detection engineering game.

Watch Now and Get the Giveaway