Open Source GitOps for Detection Engineering

Ground Floor, 11:30 Wednesday Detection engineering is a key aspect of modern security operations, but implementing effective detection strategies can be complex and time-consuming. This talk will introduce an open-source GitOps framework that enab...

Ground Floor, 11:30 Wednesday

Detection engineering is a key aspect of modern security operations, but implementing effective detection strategies can be complex and time-consuming.

This talk will introduce an open-source GitOps framework that enables security teams to manage their detection rules and policies efficiently. GitOps is a methodology that streamlines the management of infrastructure and applications using configuration files managed in Git as the source of truth. With GitOps, teams can version control their entire detection infrastructure, including detection rules, alerts, and remediation workflows.

The open source GitOps framework we will discuss offers several advantages for detection engineering. First, it allows security teams to collaborate and manage their detection infrastructure in a more agile and effective manner. Second, it provides greater transparency and auditability, enabling teams to track changes to their detection infrastructure over time. Third, it enables automated deployment of detection rules and policies, reducing the risk of human error and improving the speed of response to security threats.

Live demos and configuration samples will be provided to demonstrate the implementation of this framework with osquery, Fleet, and Matano.

Zach Wasserman