Glossary
Detection Engineering
The discipline of designing, building, and tuning detection logic, such as SIEM correlation rules or EDR behavioral signatures, to reliably identify malicious activity while minimizing false positives. It is increasingly treated as its own specialized engineering practice rather than a side task of SOC analysis.
Recent coverage mentioning Detection Engineering
AI Gives Cybercriminals a Dangerous Time Advantage
Analysis from former cybercriminal Brett Johnson reveals how threat actors leverage artificial intelligence to accelerate attack timelines.
Polymorphic Phishing Page Analysis: JavaScript Obfuscation Flaws
Analysis of a polymorphic phishing page utilizing heavy JavaScript obfuscation and variable scope bugs that cause browser loops.
Weaponizing Defender's BTR.sys to Disable Security Software
Attackers can weaponize a legitimate Microsoft Defender driver to delete security software at boot, impacting Windows 7-11.
Cybersecurity M&A Trends: Key Acquisitions in July 2026
July 2026 saw 21 cybersecurity M&A deals, including major acquisitions by CrowdStrike, Okta, and Palo Alto Networks enhancing platform capabilities.
City-Forum Data Theft Targets Salesforce and ServiceNow Portals
City-Forum data theft attacks target misconfigured Salesforce and ServiceNow portals, exploiting overly permissive guest access rules.
Advertisement