Ertugrul Akbas·1d agoLLM and SIEM: Coming TogetherAI agents are producing logs at a speed, scale, and cost that classical systems never approached. So the obvious question follows: if a…
Saif Khan·1d agoMicrosoft Sentinel SOAR: Automate Incident Response with Azure Logic AppsA Complete Hands-On Lab in the Microsoft Defender Portal
Muhammad Shoaib Shafqat·1d agoBuilding a Zero-Touch Gmail Phishing Detection Engine with Wazuh SIEMHow I automated email inspection, threat intelligence lookups and SIEM alerting using Wazuh, Python and VirusTotal.
Svetoslav·2d agoA Threat Investigation of TryHackMe’s “Hunt Me I: Payment Collectors”Anatomy of a Windows Compromise: Reconstructing the Attack Lifecycle via SIEM Telemetry
Mustafa Demir·2d agoSplunk ile Log Analizi — Eğitim Notları 3SPL ile Veri Düzenleme, Zaman Analizi ve Ham Loglardan Alan Çıkarma
Saif Khan·2d agoMicrosoft Sentinel in the Defender Portal: A Complete Hands-On SetupFrom Zero to Your First SIEM Detection — A Practical Guide for Aspiring SOC Analysts and Security Engineers
InOSINT TeambyAshraf Gamal·3d agoAutomated SigmaHQ to Wazuh XML Rule ConversionField note: This article documents a focused conversion workflow and a Python prototype for a Wazuh 4.14.0 lab. It is not an official…
InAnton on SecuritybyAnton Chuvakin·4d ago“I Don’t Need a SIEM, I Have Ollama!” (Yes, You Do!)Warning: this blog is an experiment. The idea for a blog came from a real conversation I had with somebody. The content is researched…
