https://odef.wiki/odef/index.htmlChapter 1 Open Detection Engineering Framework A detection engineering storyHugoen-USMon, 27 Mar 2023 21:29:13 -0400https://odef.wiki/odef/introduction/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://odef.wiki/odef/introduction/index.htmlPurpose ODEF enables organizations to establish and apply fundamental principles and best practices in detection engineering. Adopting ODEF accelerates service enhancement, refines processes, and advances cybersecurity maturity. The framework strategically aligns cybersecurity efforts with business objectives (e.g., risk reduction and operational resilience). It enables the creation of robust detection systems, provides assurance, reduces reliance on vendors, and, most importantly, strengthens an organization’s overall security stance. ODEF defines core principles for effective detection engineering and introduces a three-tiered maturity model to evaluate organizational performance.https://odef.wiki/odef/framework-core/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://odef.wiki/odef/framework-core/index.htmlFramework Core The Framework Core is a suite of activities aimed at achieving specific cybersecurity objectives, supplemented by illustrative examples to guide their implementation. The Core is structured around three lifecycle phases: Sunrise, Midday, and Sunset which holistically cover the detection lifecycle from inception to completion, with dedicated functions, guidelines, and goals for each phase. Together, these components provide detection engineers with a “north star” focus, enabling them to deliver high-quality detections with precision.https://odef.wiki/odef/phases/index.htmlMon, 27 Mar 2023 21:29:13 -0400https://odef.wiki/odef/phases/index.htmlIntro In the rhythm of each day lies the strength of progress; every sunrise brings new potential, midday illuminates our purpose, and sunset reminds us to refine and renew. Phases ODEF pioneers the concept of a detection lifecycle, comprehensively encapsulating the journey of a detection mechanism from creation to retirement. It's structured into three distinct phases: Sunrise, Midday and Sunset. This tri-phase approach ensures thorough coverage for each stage of a detection's active life. Corresponding to each phase are specific functions, goals, and guidelines that lay the groundwork for effective and efficient detection engineering.