Swing by and say hello to Red Canary at GrrCON at booth #1! We’ll have shirts, socks, and a chance for one lucky guest to win a Red Canary Ember Mug in our raffle! And don't miss our presentation on Detections & Dragons, Creating Detection Logic that Scales on Thursday, October 2nd at 2:30pm at Signal Noise Track!
Red Canary is a leader in managed detection and response. We serve companies of every size and industry, focusing on finding and stopping threats before they can have a negative impact. As the security ally for nearly 1,000 organizations, we provide MDR across our customers’ cloud workloads, identities, SaaS applications, networks, and endpoints.
Whether you’re tackling identity risks, securing the cloud, or making sense of your security data, we got you.
Building great detection logic isn’t just about catching one bad thing – it’s about creating detection analytics that can scale, adapt, and survive real-world attacks. In this session, we’ll explore the key challenges detection engineers face, the qualities that separate fragile logic from resilient detections, and a repeatable strategy for crafting rules that evolve with your environment.
Using real-world examples (and a little fantasy flair), we’ll walk through how to design, validate, and refine detection content that balances signal vs. noise, precision vs. coverage, and theory vs. operational reality. Whether you’re hunting for fileless malware or defending against nation-state dragons, you’ll leave this session with practical frameworks, testing strategies, and mindset shifts that will help you build detection logic that actually scales.