[SANS Institute and Anvilogic Present] The 2025 State of Detection Engineering Report
Join the waitlist
Skip to main content
Detection Engineering Fundamentals: Best Practices for Building Robust Detections

#7 Detection Engineering Fundamentals: Best Practices for Building Robust Detections

August 31, 2023

Get the Giveaway

Join us for our 7th episode where we'll continue diving deeper into the fundamentals of detection engineering. In this episode, Tim Frazier and Eric Hines will go through the basics of:

  • How to build detections with a hands-on example
  • How to organize your various detections
  • How to ensure your detection engineering program can scale with detection-as-code principles

‍

No matter your skill level, this session is a great way to get a different perspective on your detection engineering basics, and see how we're using detection-as-code at scale!

Episode Host Headshot
Tim Frazier
Sales Engineering Director, Anvilogic
Episode Host Headshot
Eric Hines
Sr. Manager Threat Detection & Research, Anvilogic

Additional Resources

Launch the Snowflake Lab
Anvilogic for Snowflake
Detection Engineering with MITRE ATT&CK
Podcast

More Episodes

Top 10 KQL Queries Every DE Should Know

December 12, 2024

#39 Top 10 KQL Queries Every DE Should Know

In this episode, Alex sits down with Sergio Albea, an accomplished Threat Hunter, Researcher, User Behavior Analyst, and Senior Cloud Security Engineer/Architect, to share a must-have resource for detection engineers: the Top 10 KQL Queries of 2024.

Watch Now and Get the Giveaway
Typo Trouble: How LLMs Can Outsmart TYPOSQUATTING Attacks

December 5, 2024

#38 Typo Trouble: How LLMs Can Outsmart TYPOSQUATTING Attacks

In this episode, we chat with the brilliant Mike Hart, a data scientist with a mission: to outsmart the sneaky world of typosquatting attacks. Just in time for the holiday shopping frenzy, we explore how his open-source project leverages LLMs to safeguard users from clicking on malicious look-alike links.

Watch Now and Get the Giveaway
Maturing SecOps with Detection-as-Code

November 21, 2024

#37 Maturing SecOps with Detection-as-Code

Ever feel like detection rule management is stuck in the Stone Age? This episode with Wade Wells a DE powerhouse trailblazing DaC in the industry is all about leveling up with Detection-as-Code—a game-changing way to manage threat detection that ditches the manual grind. We’ll break down how using code and automation can bring collab, speed, and structure to your detection engineering game.

Watch Now and Get the Giveaway