Automating Security Detection Engineering: A hands-on guide to implementing Detection as Code Automating Security Detection Engineering: A hands-on guide to implementing Detection as Code Paperback Kindle

From the Preface:

Detection engineering as a practice intersects the best of security operational analytics, engineering, and research. What's often left out is the automation life cycle of how the practice works with a globally distributed team at scale. There are many times when engineers who perform manual tasks, or administrative-burdensome items, can be greatly expedited by automation using DevSecOps principles. Automation is paramount to scaling the team and letting engineers focus on what they do best. The most effective automation comes in the form of a Detection-as-Code (DAC) program that incorporates three key principles:

• Research and engineering expertise
• Technology stacks that support integrations
• A "shift-left" mindset for work streams

This book aims to extend the core skill and focus from only creating use cases to mastering the life cycle of the use cases through automation. This book will cover the best practices and advance your skills to implement an effective DAC program.

Who this book is for:

Detection engineers, SOC engineers, or any cybersecurity professional who wants to gain practical skills and best practices to automate any part of the use case detection life cycle from the various labs and concepts in this book.

The three main personas who are the target audience of this content are as follows:

• Detection engineers: Technical SMEs that want to expedite their use case life cycle through automation while creating more consistency at scale, using a wide range of technologies and code development.
• SOC engineers: Technical SMEs who want to gain a better understanding of detection engineering needs and workflows. This book informs these individuals what infrastructure and patterns to use and how to support the detection engineering team with appropriate tooling by maturity.
• Technical program managers: Leaders who want to gain a better understanding of how to optimize detection engineering strategically and how to measure program success.