Detection Engineering

Articles about detection engineering from security operations practitioners.

Detection Engineering in the Age of LLMs: What Changes and What Doesn't

LLMs can write Sigma rules, translate between SIEM platforms, and review detection logic. But they cannot replace the adversarial mindset that makes detection engineering effective.

OAOluwatimilehin Ademosu · Apr 1, 2026 · 10 min

Writing Detection Rules That Survive Production: A Field Guide

Most detection rules follow the same arc: written in response to a threat report, deployed, tuned into ineffectiveness, disabled. Rules that survive production are built with different assumptions.

OAOluwatimilehin Ademosu · Feb 10, 2026 · 13 min

Stay sharp on security operations

Practitioner takes on SOC modernization, detection engineering, threat hunting, and more. No fluff. No product pitches.

Latest

Detection Engineering

Using MITRE ATT&CK for Threat-Informed Detection Coverage

Most teams have an ATT&CK heatmap. Fewer have a plan to improve it. The teams that use ATT&CK most effectively treat it as a navigation tool, not a report card.

OAOluwatimilehin Ademosu · Dec 30, 2025 · 10 min

Detection Engineering — Future of SecOps | FutureSecOps