T&S Detection Engineering Overview

Build a detection-engineering practice for T&S. Learn the detection lifecycle (hypothesise, build, evaluate, deploy, monitor, retire), the detection backlog with prioritisation, runbook attachment so analysts know what to do when a detection fires, eval discipline before deployment, and the relationship between detection engineers and front-line analysts.