Summary

In this chapter, we’ve learned how to create, deploy, and execute integration level testing across multiple security solutions. We saw the advantages of mapping payloads to TTP identifiers for future testing and inventory and examined the advantages of where dynamic integration testing can occur without disrupting a CI/CD pipeline. We adapted integration testing to run within the CI/CD pipeline using different runners and techniques for test cases. Finally, we set up a BAS solution and experimented with deploying C2 agents that can be used for simulating tests.

Now that we understand in-depth the advantages of Detection-as-Code with CI/CD pipelines including various tests, we can further leverage efficiencies leveraging AI just as we did with detection creation as an augmentation to our traditional tests in the upcoming chapter.