BSidesSF 2026 - Detection Allegro: Composing Detection Rules with... (Raphael Ruban, Chen Cao)

This talk focuses on improving the efficiency of threat detection development through the introduction of a custom agentic workflow. The speakers, Raphael Ruban and Chen Cao, share their innovative approach, which has reduced the time required for writing and maintaining detection rules by over 80%. They present their concept of a "detection duet," designed to transform unstructured ideas into actionable rules, alongside a general-purpose agent dedicated to code maintenance.