diff --git a/docs/detections/detection-engine-intro.asciidoc b/docs/detections/detection-engine-intro.asciidoc index 5607e31dab..3c5f59304c 100644 --- a/docs/detections/detection-engine-intro.asciidoc +++ b/docs/detections/detection-engine-intro.asciidoc @@ -116,4 +116,14 @@ setting is not enabled in the `elasticsearch.yml` file. For more information, re [[detections-logsdb-index-mode]] == Using logsdb index mode -To learn how your rules and alerts are affected by using the {ref}/logs-data-stream.html[logsdb index mode], refer to <>. \ No newline at end of file +To learn how your rules and alerts are affected by using the {ref}/logs-data-stream.html[logsdb index mode], refer to <>. + +[discrete] +[[manage-rule-dac]] +=== Manage rules as code + +Utilize the https://dac-reference.readthedocs.io/en/latest/dac_concept_and_workflows.html[Detection-as-Code] (DaC) principles to externally manage your detection rules. + +The {elastic-sec} Labs team uses the https://github.com/elastic/detection-rules[detection-rules] repo to develop, test, and release {elastic-sec}'s <>. The repo provides DaC features and allows you to customize settings to simplify the setup for managing user rules with the DaCe pipeline. + +To get started, refer to the https://github.com/elastic/detection-rules/blob/main/README.md#detections-as-code-dac[DaC documentation]. \ No newline at end of file