Detection Engineering
SOC & Blue Team
- Chapters
- 7
- Reading time
- 23.9 h
- Level
- Advanced → Expert
7 chapters
Start reading →- Detection Engineering with Sigma RulesAdvanced · 185 min
- Endpoint Detection: Sysmon, Osquery & VelociraptorAdvanced · 195 min
- YARA: Writing Rules to Detect MalwareAdvanced · 200 min
- Writing Splunk & KQL Detections for Real AttacksAdvanced · 205 min
- Mapping Detections to MITRE ATT&CKExpert · 210 min
- SOC Automation & SOAR: Playbooks & ResponseExpert · 215 min
- Building a Detection Lab & Testing Your CoverageExpert · 225 min