Detection Engineering Dispatch

32 Episodes

Reverse

Does the SOC have a Memory Problem?? A better approach to your field notes feat. K.C Yerrid

2026-02-1741:37

KC Yerrid joins Detection Dispatch to break down SCOUT — a local-first, open-source analyst cockpit built around atomic notes, entity relationships, and structured investigation memory. The SCOUT Project Github: https://github.com/kcyerrid/SCOUT In this episode, we explore: Why static investigation notes rarely get referenced again and why tribal knowledge evaporates after every incidentWhy “everything is an entity” is a massive shift for analystsHow graph-based sensemaking helps visualize re...

The New Definition of Visibility & the Evolving Role of IOCs: Detection Engineering Through a UFO Lens with David Burkett

2026-02-0301:07:59

Detection engineering has the same problem as UFO sightings....sometimes we think we’re seeing something, but we’re not sure what. In this UFO-themed special, Alex Hurtado and David Burkett break down the new definition of visibility, the evolving role of IOCs, and the rise of EDR evasion exploiting blind spots in our tools, data, and assumptions. 🛸 Shownote references: https://www.liesabove.com/https://www.magonia.io/Signal Detection Theory: https://www.magonia.io/blog/vintage-detection-rad...

The SOC Then vs Now...a 'Possible Travel' Season 2 Special Feat. Matt Konwiser & Chris Liccardi

2026-01-2901:13:42

In this episode, we hop in the time machine with my old friends Matt Konwiser and Chris Liccardi to break down the evolution of the SOC and explore what actually got better, what got worse, and why alert fatigue may be the normalized thing no one wants to do anything about. What’s inside: The ghost of SOCs past: linear, manageable, maybe even… boring?IAM, UBA, VPCs, and other buzzwords that broke the workflow also UBA is the bridesmaid of security and why it should include an A for AI behavio...

Cool Story, Bro: Making Detection Engineering Matter Up the Chain

2025-12-1801:04:45

A Chloe Burton special on the very human side of detection engineering. From a nonlinear path into security (neuroscience, psychology, Splunk era chaos) to leading a DE team today, Chloe and Alex break down why context beats checklists, why so many detections cluster in the middle of the MITRE ATT&CK framework, and how telemetry availability quietly shapes what we defend. We dig into detection fundamentals that don’t get talked about enough: avoiding the myth of the perfect rule, resistin...

To AI SOC or NOT TO AI SOC feat. Dennis Chow

2025-11-1801:11:50

What if the real question isn’t “Do you need an AI SOC?” but “Are your alerts actually any good?” In this episode, Alex and Dennis Chow (Director of SecOps Engineering at UKG) and co-author of Automating Security Detection Engineering break down the uncomfortable truth: if your alerts are fundamentally weak, no AI system will save you. Dennis walks through how he evaluates when alerts move from unmanageable to stable, the metrics that determine whether automation is genuinely safe, and how hi...

#box-pro-ellipsis-179203852632332{-webkit-line-clamp:2;}Detection Engineering Dispatch