Datadog Detect Chicago 2026
A half-day event produced by Datadog's SecurityLabs team, focused on the practitioner community of detection engineers and security operations professionals.
Join Nebulock's Head of Detection Strategy, Alex Hurtado, for The GATES Method: Deciding when a Threat Hunt becomes a Detection.
When a threat hunt finds something real, should it become a detection rule? Promote too much and you get alert fatigue. Promote too little and repeatable attacker behavior stays stuck in one hunter's head. Today's open-source frameworks cover the hunt and the shipped detection, but not the decision in between.
GATES fills that gap with five tests: Generalizable, Actionable, Tunable, Exposure-tested, Sustainable. Each finding either earns a path to production or a clear reason to stay a hunt. Alex will run GATES live against a real shipped detection, uncover a gap in it, and turn that gap into the next hunt.
Attendees will leave with the five gates, a routing model for findings that fail them, and a worked template you can run against one of your own shipped detections this week.
Breakout Session Time: 13:15 - 13:45 PM CT