Who this book is for
Detection engineers, SOC engineers, or any cybersecurity professional who wants to gain practical skills and best practices to automate any part of the use case detection life cycle from the various labs and concepts in this book.
The three main personas who are the target audience of this content are as follows:
- Detection engineers: Technical SMEs that want to expedite their use case life cycle through automation while creating more consistency at scale, using a wide range of technologies and code development.
- SOC engineers: Technical SMEs who want to gain a better understanding of detection engineering needs and workflows. This book informs these individuals what infrastructure and patterns to use and how to support the detection engineering team with appropriate tooling by maturity.
- Technical program managers: Leaders who want to gain a better understanding of how to optimize detection engineering strategically and how to measure program success. The book serves as a reference to understand the technical components and how to operationalize the program with maturity.