Detection Engineering Weekly · Scour

DEW #156 - Putting Detection Coverage on Blast, SOC Metrics Stink and the decline of cool Windows Malware

detectionengineering.net·2d

DEW #155 - Gems from the 2026 Trenches

detectionengineering.net·1w

DEW #154 - Mythos <> Firefox hype, RSigma gets an uplift, Detection-as-Code is overrated and TeamPCP Strikes Again

detectionengineering.net·2w

DEW #153 - New IPv8 Draft, macOS Threat Detection LLM Evals & Canaries in your CI/CD Pipeline

detectionengineering.net·3w

DEW #152 - Celebrating Gaps in Detection Coverage, Threat Hunting on Teams & OpenAI Axios post-mortem

detectionengineering.net·4w

DEW #151 - The Security Cognitive Rust Belt, Music Streaming Fraud & the Axios Incident Post-Mortem

detectionengineering.net·5w

DEW #150 - macOS Endpoint Security Firewall, EDR telemetry updates & Supply Chain Bonanza

detectionengineering.net·6w

DEW #149 - Roll your own Sigma SIEM, Stryker Breach and New Branding!

detectionengineering.net·8w

DEW #148 - Detection Pipeline Maturity, GenUI for Log Analysis and Hunting Kali in Splunk

detectionengineering.net·9w

DEW #147 - Flying Blind with your Logs, MAD lads and Z-scores & How Reddit Does Threat Detection

detectionengineering.net·10w

DEW #146 - The logs are lying, my latest post on Agentic Security & re-tooling security for speed

detectionengineering.net·11w

Knowing what good looks like in agentic security

detectionengineering.net·12w

DEW #145 - Modified Z-Score for Anomaly Detection, Watermarking for Audit Logs -> SIEM and Zack gives you all an RFC for homework

detectionengineering.net·13w

DEW #144 - Pyramid of Permanence and 🦞OpenClaw 🦞 Security Dumpster Fires

detectionengineering.net·14w

DEW #143 - Suppressing False Positives at Scale, Silencing EDRs & Detection Fidelity via Social Network Analysis

detectionengineering.net·15w

DEW #142 - Slack's Agentic Triage Architecture, Detection <3's Data and Sigma evals

detectionengineering.net·16w

detectionengineering.net·17w

What are Composite Detections?

detectionengineering.net·18w

What are Atomic Detection Rules?

detectionengineering.net·21w

detectionengineering.net·22w

Log in to enable infinite scrolling