Glossary
Detection Engineering
The discipline of designing, building, and tuning detection logic, such as SIEM correlation rules or EDR behavioral signatures, to reliably identify malicious activity while minimizing false positives. It is increasingly treated as its own specialized engineering practice rather than a side task of SOC analysis.