Detection Engineering Dispatch is a live series of 30 to 45-minute episodes featuring hands-on experiences, open discussions and live case studies with security operations teams at leading companies on what it takes to build a great detection engineering program.
Join your peers to knowledge share, deep dive on technical best practices, and engage in discussions relevant to the detection engineering community.
Days Until The Next Live -Session
What if the real question isn’t “Do you need an AI SOC?” but “Are your alerts actually any good?” In this episode, Alex and Dennis Chow (Director of SecOps Engineering at UKG) and co-author of Automating Security Detection Engineering break down the uncomfortable truth: if your alerts are fundamentally weak, no AI system will save you.Dennis walks through how he evaluates when alerts move from unmanageable to stable, the metrics that determine whether automation is genuinely safe, and how his team built a multi-agent pipeline on GCP capable of consuming alert volume at a rate no human team could match. He shows what automation can realistically achieve from scaling L1/L2 investigations to reclaiming analyst hours and where it still depends on skilled detection engineering.They also tackle the real decision point for leaders: when does it make sense to buy an AI SOC vendor that handles both detection development and triage, and when is it just a GPT wrapper dressed as a solution?40% discount on eBook: Use code PACKTEBOOKPackt Book URL: https://www.packtpub.com/en-us/product/automating-security-detection-engineering-9781837631421Code validity: November 30, 2025
Past Episodes & Resources
.png)
November 7, 2025
SOC analyst Spencer Pratt breaks down RAG, risk scoring, AI triage, and when to trust your alerts—or admit you're just automating chaos.

October 30, 2025
The F5 breach, M-Trends 2025 highlights, and the rise of infostealers. Alex and Scott Rodgers break down detection engineering best practices based on recent malware trends.
.png)
In this episode of Detection Dispatch, host Alex Hurtado sits down with Kostas, founder of DefendPoint Consulting and creator of the EDR Telemetry Project, to unpack the realities of endpoint detection in 2025. They discuss the evolution of EDR beyond antivirus, Sysmon’s role as a supplement—not a replacement—vendor transparency, pricing myths, and how AI SOCs are reshaping detection engineering.
