easy5 pts · first answer countsdetection-engineeringdetection-as-code
What detection as code gives you
A SOC team moves its SIEM rules out of the web console and into a Git repository with pull requests and automated tests. What is the main benefit of this "detection as code" approach?
Discussion 0
Join free to post in the discussion.
Related questions
- False positive or false negative?Cybersecurity Analyst
- The logsource block in a Sigma ruleCybersecurity Analyst
- Reading a selection and filter conditionCybersecurity Analyst
- What the contains modifier doesCybersecurity Analyst
- Why match Image with endswithCybersecurity Analyst
- Reading an ATT&CK ID like T1059.001Cybersecurity Analyst
- Run keys and the Persistence tacticCybersecurity Analyst
- Windows event for an account lockoutCybersecurity Analyst