Detectionengineering - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

tktkkame

Nov 10

Detect by invariants, not tool names: what attackers cannot change

#security #sigma #detectionengineering #windows

2 min read

jeffrey

Nov 10

Detection engineering for token replay should start with successful request shape

#detectionengineering #microsoft365 #tokenreplay #zoomeye

4 min read

Nov 9

A rule that loads fine and never fires: what we measured on our own Wazuh rig

#wazuh #siem #detectionengineering #security

5 min read

Nov 6

What tells you a Wazuh rule has gone quiet?

#wazuh #siem #detectionengineering #opensearch

7 min read

Nov 1

Wazuh custom rule never fires: shadowed by a sibling rule (and analysisd -t exits 0)

#wazuh #siem #security #detectionengineering

4 min read

Ajay Nyayapathi

Oct 25

I Taught My AI Agent to Write YARA-L Rules That Actually Compile

#security #agentskills #ai #detectionengineering

5 min read

OnaEiuspkz

Oct 24

The First Sign Was Silence: Detecting Edge Devices That Stop Talking

#fortinet #detectionengineering #logging #zoomeye

3 min read

Nov 5

Wazuh snort decoder cuts the last octet off srcip and dstip (4.14.x)

#detectionengineering #wazuh #siem #security

3 min read

jeffrey

Oct 22

Detecting PAN-OS CVE-2026-0321 with the telemetry you already collect

#panos #cve20260321 #detectionengineering #monitoring

3 min read

Oct 16

CWE-35 or CWE-22? The Classification Split Around CVE-2026-85706

#cwe22 #cwe35 #gitlab #detectionengineering

3 min read

yutianle

Oct 9

Detection content as code: reviewing a change the way you review software

#security #detectionengineering #siem

2 min read

StarkMan

Oct 8

Detection Engineering Starts With the Logs You Decided to Keep

#detectionengineering #logging #monitoring #incidentresponse

2 min read

jeffrey

Oct 4

Detection engineering for CVE-2026-100382: hunting the External Data web shell

#security #vulnerability #detectionengineering #webshell

3 min read

Oct 1

Three reasons a custom Wazuh rule stays silent after a clean config check, measured on 4.14.7

#wazuh #detectionengineering #security #linux

5 min read

jeffrey

Sep 27

Exploitation Conditions in CVE-2026-75682: What a Low-Privileged Account Buys an Attacker

#adobeconnect #cve202675682 #sqlinjection #detectionengineering

3 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.