This post details the latest evolution of Elastic Security's Detections as Code (DaC) framework, including its development timeline, current feature highlights, and tailored implementation examples.

Pre-2024: Elastic’s internal use of DaC

May 2024: Alpha release of new "roll your own” features

August 2024: "Roll your own” features now beta

March - August 2025: are generally available and supported

Additional filters

Custom folder structure

Miscellaneous local loading updates

DaC implementation with Gitlab

Custom Unit Testing tips and examples

Custom schemas usage

Trial Elastic Security

Timeline and New Features

The Engineer's Guide to Elastic Detections as Code

Author

Kseniia Ignatovych

Articles

The Engineer's Guide to Elastic Detections as Code