Sekoia.io Methodology for Advanced Detection Engineering

Sekoia.io outlines its detection engineering approach, detailing how its Threat Detection & Research team develops, tests, and iteratively refines a catalog of detection rules (over 860) with an emphasis on depth and customization. The post discusses evaluation metrics—MITRE ATT&CK coverage, false positive rates, and client-specific tailoring—arguing for prioritized, high-precision rules rather than focusing on rule quantity, and highlights ongoing adaptation to evolving threats.