Jan. 25, 2024, 8:14 p.m. | /u/matthewob5

cybersecurity www.reddit.com

I'm currently working on building out the Detection Engineering program at my company. However, I haven't come across many frameworks for metrics that we could use to score our detections. Our current process is centered around creating detections for MITRE ATT&CK techniques that we feel are most relevant to our organization. There are a few helpful articles like Cyb3rWard0g's [How Hot Is Your Hunt Team?](https://cyberwardog.blogspot.com/2017/07/how-hot-is-your-hunt-team.html?_sm_au_=iHV5kH2s2rnJlk4sM8BqHKH3q4Nt1), Palantir's [ADS Framework](https://blog.palantir.com/alerting-and-detection-strategy-framework-52dc33722df2), and SpecterOps' series on [Capability Abstraction](https://posts.specterops.io/capability-abstraction-fbeaeeb26384), but I'm still left wanting something …

can cybersecurity detections frameworks industry metrics people program quality score

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC