topic
Detection-as-Code
1 post tagged “Detection-as-Code”.
Detection-as-Code for Microsoft Sentinel and Defender XDR: A Technical Deep Dive
Microsoft's July 2026 Preview lets you manage Defender XDR custom detections as code — through the Microsoft Security Bicep extension, Microsoft.Security/detectionRules, and Sentinel Repositories. A technical walkthrough from KQL research to a deployable Bicep detection, validation, match-volume tuning, and CI/CD deployment.