#DETECTION-ENGINEERING

Published on
28 May 2026
Project Vivarium: AI Agents as Red Team and Blue Team
AI Agents Red-Team Blue-Team Detection-Engineering Project-Vivarium
An experiment in adversarial AI: local, air-gapped agent crews playing attacker and defender against each other in a sealed, fully observable lab.
Published on
14 November 2025
Detection as Code: Treating Your Rules Like Software
Detection-Engineering Detection-as-Code Sigma MITRE-ATT&CK CI/CD
Version control, CI testing, and ATT&CK coverage mapping turned a folder of SIEM rules into an engineering discipline. What changed, what it cost, and what I would do differently.
Published on
22 August 2025
Where AI Actually Helps in the SOC — and Where It Does Not
AI Machine-Learning Security-Operations Detection-Engineering SOC
Lessons from building ML-assisted detection in production: the places machine learning genuinely moves the needle, and the places it quietly makes things worse.