Summary

In this chapter, we’ve learned about the core concepts of what’s involved in successfully managing use cases for detection-engineering-focused teams. These include a life cycle that involves establishing requirements, development, testing, implementation, and deprecation. To facilitate that life cycle, we needed to determine what technology components and solutions were able to achieve this in a highly automated capacity.

Choosing the types of technologies based on organization-approved solutions and stack requirements included version control system, build job running compute, build time testing instrumentation, secrets management, and ensuring adequate support for each enterprise tool that was available in their APIs and an established use case syntax.

We finally wrapped up all of our decisions by utilizing a simple checklist, decision, and justification matrix to help our organization understand the impact and advantages of investing time and resources...