Detection Engineering
OCSF 1.9 for Detection Engineers
Use OCSF 1.9 as a shared security-event language while keeping observation, profile conformance, extensions, mappings, and local validation separate from coverage claims.
Tag
Security Telemetry
Security Telemetry concepts and practices used in modern detection engineering.
3 resources
Resources in this tag
Browse all resources
Detection Engineering
Security Telemetry Data Contracts
A telemetry data contract makes event meaning, fields, timing, populations, ownership, change, and failure visible so detections do not depend on undocumented assumptions.
Detection Engineering
Security Telemetry Quality and Blind Spots
Evaluate whether security telemetry has the coverage, context, timing, and stability needed for investigation and detection.