Back in March 2025, I gave a talk at Crikeycon Brisbane all about detection engineering. In this talk, I try to put some practical definition around what DetEng is, what it does, what it can do, and most importantly, how you can operationalise it into your own SOC. This is a bit of an oldie now, but I wanted to share it again for anyone who stumbles on this blog and might be interested to see it.
What actually is Detection Engineering and why do I need it?