Detection Engineering Dispatch

Anvilogic

Detection Engineering Dispatch is a detection engineering & threat hunting podcast featuring spicy use cases, real-world war stories, and the brilliant minds building the future of SecOps.We’re talking sharp takes, top-of-mind challenges, and community content straight from the folks pushing the limits of detection engineering, threat hunting, and everything in between.Come for the nerdy bits. Stay for the vibes. Join our community to stay up to date on all of our newest episode drops:➡️ Register HereStay in the loop! Connect with us on social: Website: https://www.anvilogic.com/LinkedIn: https://www.linkedin.com/company/anvilogic YouTube: https://www.youtube.com/@Anvilogic 

  1. Detection Dispatch Episode 53: A New Way to UBA feat. Snowflake’s Insider Threat Team

    JUL 17

    Detection Dispatch Episode 53: A New Way to UBA feat. Snowflake’s Insider Threat Team

    Join Snowflake’s Insider Threat team for a direct discussion on separating everyday behavioral drift from true malicious intent. We examine role changes, privilege creep, and off-hour access, showing how context—identity, project timelines, and data lineage—sharpens detection and reduces noise. The conversation ends with a clear-eyed look at the trade-off between missing an insider and overwhelming analysts with false alerts, offering practical guidance for any modern UBA program. About Detection Engineering Dispatch Detection Engineering Dispatch is a series featuring open discussions and live case studies with security operations teams at leading companies on what it takes to build a great detection engineering program.

    57 min
  2. Detection Dispatch Episode 52: Prompted to Fail: When LLMs Go Rogue

    JUN 18

    Detection Dispatch Episode 52: Prompted to Fail: When LLMs Go Rogue

    LLMs are rewriting the rules of app security—and not always in a good way. In this episode Alex sits down with Scott Rogers, a seasoned data scientist at ANvilogic to unpack why LLMs are the new wild west of application risk—and how old-school OWASP principles are making a serious comeback. We cover: Real-world prompt injection failures (yes, including Air Canada’s rogue chatbot)How RAG systems can accidentally leak sensitive dataWhy GenAI risk ≠ traditional appsec—but it rhymesHow classic tools like SAST, DAST, and logs can still save your baconWhether you're threat modeling your first LLM system or already knee-deep in GenAI, this episode is full of spicy detection ideas, war stories, and practical advice you won’t want to miss. Stay in the loop! Connect with us: Join Dispatch Community: https://www.anvilogic.com/workshopWebsite: https://www.anvilogic.com/LinkedIn: https://www.linkedin.com/company/anvilogic YouTube: https://www.youtube.com/@Anvilogic About Detection Engineering Dispatch Detection Engineering Dispatch is a series featuring open discussions and live case studies with security operations teams at leading companies on what it takes to build a great detection engineering program.

    38 min
  3. Detection Dispatch Episode 51: 5 Bitter Pills to Swallow RE: Agentic AI w/ Oliver Rochford

    JUN 5

    Detection Dispatch Episode 51: 5 Bitter Pills to Swallow RE: Agentic AI w/ Oliver Rochford

    Everyone’s talking about agentic AI—but what are we actually building? In this episode, Oliver Rochford and Alex unpack five bitter pills security teams need to swallow about the current state of “agents.” Most aren’t autonomous, many are mislabeled, and flashy wrappers can’t hide weak detections or bad data. We dig into the hype, the gaps, and what real operational maturity looks like. If you're duct-taping GPT-4 to your SOC and hoping for magic, this one’s for you. Connect with Oliver on LinkedIn: https://www.linkedin.com/in/oliver-rochford/ Check out his new startup: https://aunoo.ai/ Subscribe to his Curious AI newsletter: https://www.linkedin.com/newsletters/7121129447054786560/?displayConfirmation=true Stay in the loop! Connect with us: Join Dispatch Community: https://www.anvilogic.com/workshopWebsite: https://www.anvilogic.com/LinkedIn: https://www.linkedin.com/company/anvilogic YouTube: https://www.youtube.com/@Anvilogic About Detection Engineering Dispatch Detection Engineering Dispatch is a series featuring open discussions and live case studies with security operations teams at leading companies on what it takes to build a great detection engineering program.

    1 hr
  4. Detection Dispatch Episode 50: 5 Signs You're Overengineering your Detection Logic w/ John Dempsey

    MAY 22

    Detection Dispatch Episode 50: 5 Signs You're Overengineering your Detection Logic w/ John Dempsey

    Is your detection logic doing too much? In this special episode, Alex sits down with Johnathan Dempsey to unpack the 5 signs your rules are too complex — and why that might be hurting more than helping. From alert overload to unreadable logic, learn how to simplify without sacrificing fidelity. If your detections look like a math thesis, this one’s for you. Stay in the loop! Connect with us: Join Dispatch Community: https://www.anvilogic.com/workshopWebsite: https://www.anvilogic.com/LinkedIn: https://www.linkedin.com/company/anvilogic YouTube: https://www.youtube.com/@Anvilogic About Detection Engineering Dispatch Detection Engineering Dispatch is a series featuring open discussions and live case studies with security operations teams at leading companies on what it takes to build a great detection engineering program.

    34 min
  5. Detection Dispatch Episode 49: Hack my S3 with Kennedy Torkura

    MAY 8

    Detection Dispatch Episode 49: Hack my S3 with Kennedy Torkura

    We teamed up with Kennedy Torkura, CTO & Co-founder at Mitigant to test common S3 breach techniques—SSRF pivots, credential abuse, and more—against live cloud infrastructure using Anvilogic’s open-source AWS Detection Packs and threat scenarios. We cover: Which techniques slipped through detectionHow behavioral detections held upThe hygiene checklist every detection engineer should be usingBuckets were breached. Lessons were learned. Detections were challenged.And now, you get the inside scoop on what worked—and what didn’t. Anvilogic Github Links in Episode:  https://github.com/anvilogic-forge/ar...  Stay in the loop! Connect with us: Join Dispatch Community: https://www.anvilogic.com/workshopWebsite: https://www.anvilogic.com/LinkedIn: https://www.linkedin.com/company/anvilogic YouTube: https://www.youtube.com/@Anvilogic About Detection Engineering Dispatch Detection Engineering Dispatch is a series featuring open discussions and live case studies with security operations teams at leading companies on what it takes to build a great detection engineering program.

    42 min
  6. The AI Series: Inside URL Guardian—An LLM Built for Detection

    APR 30

    The AI Series: Inside URL Guardian—An LLM Built for Detection

    Mike Hart returns to walk through URL Guardian, our new LLM for malicious URL detection. Now live on HuggingFace, it’s built to spot suspicious patterns and reduce false positives—without the regex headaches. Check out the Hugging Face here: https://huggingface.co/Anvilogic/URLGuardian Stay in the loop! Connect with us: Join Dispatch Community: https://www.anvilogic.com/workshopWebsite: https://www.anvilogic.com/LinkedIn: https://www.linkedin.com/company/anvilogic YouTube: https://www.youtube.com/@Anvilogic About Detection Engineering Dispatch Detection Engineering Dispatch is a series featuring open discussions and live case studies with security operations teams at leading companies on what it takes to build a great detection engineering program.

    44 min
  7. The UEBA Illusion: Why Traditional UEBA Falls Short

    APR 16

    The UEBA Illusion: Why Traditional UEBA Falls Short

    Alex sits down with Kevin Gonzalez to pull back the curtain on User and Entity Behavior Analytics (UEBA), and expose the gap between its promises and real-world pitfalls. Hear his stories from the trenches of deploying UEBA multiple times at different organizations, and his blueprint for how teams should align UEBA with real attacker behaviors. Read his blog about his experience: https://www.anvilogic.com/learn/bg-ue... If you want to join our sessions live, join our community here: https://www.anvilogic.com/workshop Stay in the loop! Connect with us on social: Website: https://www.anvilogic.com/LinkedIn: https://www.linkedin.com/company/anvilogic YouTube: https://www.youtube.com/@Anvilogic About Detection Engineering Dispatch Detection Engineering Dispatch is a series featuring open discussions and live case studies with security operations teams at leading companies on what it takes to build a great detection engineering program.

    43 min
  8. Episode 46: Machine Learning-Powered Threat Hunting ft. Sydney Marrone

    APR 3

    Episode 46: Machine Learning-Powered Threat Hunting ft. Sydney Marrone

    Our last drop for International Women's Month featuring Sydney Marrone—Principal Threat Hunter at Splunk and co-author of PEAK Threat Hunting—to explore how ML-driven techniques are transforming detection strategies. Tune in to hear Sydney and Alex break down real-world applications of advanced analytics to surface threats hidden in HTTP datasets.  Check out the HEARTH community on their github here: https://github.com/THORCollective/HEARTH If you want to join our sessions live, join our community here: https://www.anvilogic.com/workshop Stay in the loop! Connect with us on social: Website: https://www.anvilogic.com/LinkedIn: https://www.linkedin.com/company/anvilogic YouTube: https://www.youtube.com/@Anvilogic  About Detection Engineering Dispatch Detection Engineering Dispatch is a series featuring open discussions and live case studies with security operations teams at leading companies on what it takes to build a great detection engineering program.

    31 min
See All (23)

About

Detection Engineering Dispatch is a detection engineering & threat hunting podcast featuring spicy use cases, real-world war stories, and the brilliant minds building the future of SecOps.We’re talking sharp takes, top-of-mind challenges, and community content straight from the folks pushing the limits of detection engineering, threat hunting, and everything in between.Come for the nerdy bits. Stay for the vibes. Join our community to stay up to date on all of our newest episode drops:➡️ Register HereStay in the loop! Connect with us on social: Website: https://www.anvilogic.com/LinkedIn: https://www.linkedin.com/company/anvilogic YouTube: https://www.youtube.com/@Anvilogic 

Information