Detection engineering at scale: one step closer (part two)

This article presents Sekoia.io’s CI/CD-enabled detection engineering methodology, detailing the lifecycle from Sigma rule creation and metadata planning through an adapted Palantir ADS framework, continuous syntax/logic testing with real and replayed logs, and automated documentation outputs (e.g., ATT&CK mapping, log source compatibility, EventIDs, and changelogs) to ensure scalable, reliable detections.