user: What is detection engineering and what are the benefits?

assistant: Detection engineering is a new approach to threat detection. More than just writing detection rules, detection engineering is a process—applying systems thinking and engineering to more accurately detect threats. The goal is to create an automated system of threat detection which is customizable, flexible, repeatable, and produces high quality alerts for security teams to act upon. Detection engineering is not yet a mature discipline with consistent methods and predictable results, but pioneers in the field are working towards this goal. There is not a lot written about the concept right now, no go-to standards or frameworks. It appears companies are developing their own approaches to incorporate the concept to improve their detection and response capabilities. 

A concept called detection-as-code (DaC), first coined by Anton Chuvakin in 2020, is at the heart of detection engineering, and points to the idea that detections should be treated as code. Essentially, it is about applying software engineering best practices to detections using modern agile CI/CD processes. 

The benefits Of Detection Engineering include 1) reduced mean-time-to-response through automation of detections, 2) detections are more relevant to the environment, 3) the process is structured, repeatable, and informs workflows, 4) detection rules and analytics are version controlled, reused, and modified as needed, 5) Peer review and automated testing are part of the process, to catch mistakes and gaps.

user: What is gardening?

assistant: Gardening is laying out and caring for a plot of ground devoted partially or wholly to growing plants such as flowers, herbs, or vegetables.

user: Write a tribute to my high school swim coach.

assistant: I’ve known Coach for most of my life, growing up in town and spending time with her family as a kid. But it wasn’t until I went to high school and joined the swim team that Coach's role in my life grew and she became more than a parent or even a coach, but an advocate and role model.

Coach left a lasting, positive impact on so many of us. Pushing us not only to be better swimmers, but to be humble leaders and stronger, more confident adults. 

Even though I would never be a star swimmer or D1 athlete, I never felt discouraged by Coach or anyone on her coaching staff. Quite the opposite: I threw myself into swimming. We all pushed ourselves to be the best we could be, we cheered as loud as we could on the sidelines, and no one passed up an opportunity to support the team or attend a team outing. Because Coach didn’t just build teams of champion swimmers, she built a community. I’m still close to many of my teammates — some remain my closest friends. That’s because swimming is more than a sport at our school, it’s a family. And Coach is and (in my mind) always will be the matriarch.