Awesome to see a blog post about this. I’ve used a similar process before. Do you think there’s value in including testing as a explicit stage during workflow? I think test driven detection development can be awesome if done right.
JIRA workflow for Detection Engineering teams https://link.medium.com/VnJoep7iP1 #siem #dfir #splunk
-
-
-
Thanks! Yes, especially if you engage diff teams to do it. Think about a specific Oracle audit setting or cmd that relies on a DBA or simply a red team in a diff TZ. It helps clearly reporting the detection is ‘In Testing’ but there may be other ways to do it for sure!
Kraj razgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.