Notes from building Talon Studio

Detection Engineering, as Code

SIEMs detect about 21% of the ATT&CK techniques their telemetry could cover, and one production rule in eight never fires. Why we built Talon Studio.

• Talon Studio
• Detection engineering
• Research

23 July 20265 min read

Detection Engineering, as Code

SIEMs detect about 21% of the ATT&CK techniques their telemetry could cover, and one production rule in eight never fires. Why we built Talon Studio.