Curriculum
Course Content
4 items · 1 sections
- 01 From technique to detection rule
- 02 Testing a detection
- 03 Tuning to reduce false positives
- 04 Maintaining detections over time
BTL1 · SC-200
Intermediate
Certificate
Detection Engineering
Writing the detections a SOC runs on. Turning a technique into a detection rule, testing it against real and benign activity, and tuning it so it fires on the attack and not on the business.
Skills
What You Will Learn in This Course
Turn a technique into a detection rule.
Test a detection against real and benign activity.
Tune to reduce false positives.
Maintain a detection over time.
About This Course
Writing the detections a SOC runs on. Turning a technique into a detection rule, testing it against real and benign activity, and tuning it so it fires on the attack and not on the business.
Requirements
- SIEM fundamentals.
Who It Is For
- Analysts moving toward engineering.
Certified
Certificates You Can Earn
Finish your course and receive an accredited MotiGraph certificate you can add to your CV and share with employers.
