Download this detection engineering workshop with CardinalOps Security Researcher, Daniel Koifman, to reinforce the best practices recommended in our 2025 State of SIEM Detection Risk Report. In this recording, SOC leaders and practitioners will get actionable insights and gain hands-on experience to strengthen their security posture.
This workshop digs into strategies and tactics aligned to the report’s key takeaways and best practice recommendations. Throughout the session, Daniel reviews leading-edge detection engineering techniques focused on durable SIEM rules focused on identifying immutable artifacts: attack footprints that persist regardless of toolsets or target systems. The workshop encompasses a series of hands-on tasks to create and refine detection rules based on scenarios inspired by real-world threats and adversary tactics and techniques.
During this this hands-on workshop, you will learn:
- Advanced detection engineering philosophies to ensure your detection logic remains effective against evolving attacker tactics and toolsets.
- How to create and refine durable, high-fidelity SIEM detection rules with interactive tasks based on real-world threat scenarios.
- Actionable strategies and tangible skills you can immediately apply to improve your security posture.
Speakers
Daniel Koifman
Security Researcher
CardinalOps
