Detection Engineering at Scale

Welcome

Resources and links from AWS re:Invent 2025 session SEC327-S: Detection Engineering at Scale - Building High-Fidelity Security Operations.

Resources

Datadog

• Datadog Security Labs
• Security Labs Newsletter
• Datadog Cloud SIEM
• Observability Pipelines
• Vector by Datadog
• OCSF Processor
• Vector Remap Language
• Bits AI Security Analyst
• Archive Search
• Detection Rules Documentation
• Log Archiving
• Log Rehydration
• Datadog Workflow Automation
• Datadog re:Invent 2025 Launches

OCSF (Open Cybersecurity Schema Framework)

• OCSF Official Site
• OCSF GitHub
• OCSF Server

Detection Frameworks

• Sigma
• MITRE ATT&CK

Testing & Emulation Tools

• Stratus Red Team
• Atomic Red Team
• CloudGoat

AWS Security Services

• Amazon GuardDuty
• AWS Security Hub
• AWS CloudTrail
• Amazon Detective

Programs

• Datadog for Startups
• Datadog Learning
• Meet Datadog at re:Invent

Speakers