Episode 43: Building Thorough Detections via Detection Modeling

In this episode, host Alex Hurtado welcomes back Andrew VanVleet, who breaks down a comprehensive approach to technique analysis using Detection Data Models (DDMs). Andrew walks through a 10-step process for analyzing Kerberoasting (T1558.003), identifying four distinct attack procedures and their detection strategies. Learn how to map telemetry to detection opportunities, recognize security blind spots, and develop multi-layered strategies that make successful attacks nearly impossible. ...

Om Podcasten

Detection Engineering Dispatch is a detection engineering & threat hunting podcast featuring spicy use cases, real-world war stories, and the brilliant minds building the future of SecOps.We’re talking sharp takes, top-of-mind challenges, and community content straight from the folks pushing the limits of detection engineering, threat hunting, and everything in between.Come for the nerdy bits. Stay for the vibes. Join our community to stay up to date on all of our newest episode drops:➡️ Register HereStay in the loop! Connect with us on social:Website: https://www.anvilogic.com/LinkedIn: https://www.linkedin.com/company/anvilogic YouTube: https://www.youtube.com/@Anvilogic