Detection Lifecycle
The full arc of a detection from idea to retirement, hypothesis, development, testing, deployment, tuning, monitoring, and eventual retirement, framing detection as something maintained over time rather than written once.
Concept Neighborhood
Start here
Detection Hypothesis
The most substantial related concept here, covered by 13 lessons.
Related Lessons
17 lessons cover this concept · showing the first 8SIEM Data Models and Log Normalization
SOC Analyst
Aggregation and Statistical Analysis for Threat Detection
SOC Analyst
Time-Series Analysis and Multi-Source Correlation
SOC Analyst
Query Tuning, Lookup Tables, and Production Operations
SOC Analyst
Designing a Detection Program with SIEM Queries
SOC Analyst
Detection Engineering Purpose and Workflow
SOC Analyst
Building Detections from Threat to Rule
SOC Analyst
Testing and Validating Detections
SOC Analyst
Sign in to open lesson content directly.