Detection Rule Documentation: The ADS Framework Guide
Learn detection rule documentation with Palantir's ADS framework: the 10 sections, detection as code, and a full worked example for your SOC.
Tag detection engineering
Detection as Code: A Pipeline That Won’t Flood Your SOC
Learn detection as code with a four-stage pipeline to validate, translate, test, and deploy Sigma rules, plus the mistakes that sink SOC migrations.
Sigma Rules Explained: Architecture, pySigma, Modifiers, & Correlation
Learn how Sigma rules, modifiers, and pySigma power platform-agnostic detection engineering and threat hunting, plus the pitfalls tutorials skip.
How to Detect North Korean Remote Workers Hiding Inside Your Company
North Korean remote workers pass interviews, then extort you. Learn the DPRK remote IT worker hiring pipeline, TTPs, and seven detection opportunities.
Detection Engineering in 2026: The Complete Lifecycle (Sigma, YARA, DaC & AI)
Detection engineering is more than writing SIEM rules. Learn the 6-phase lifecycle, the detection-as-code model, and why identity is the new battlefield.
What is Detection Engineering? The Complete Career Guide for 2026
Learn what detection engineering is, why it's the hottest cyber security career in 2025, and how to transition from SOC analyst to detection engineer.