Detection Engineering

We want to better enrich some of our data generated via attack sim for making custom detections and spending our time where it counts. (Have moved off traditional SIEM to more of a data lake driven approach)

Any tips?

attack blueteamsec data data lake detection detection engineering detections engineering generated making siem sim spending tips