Shahzaib Sajid·3h agoThe Blockchain Project That Had Nothing to Do With BlockchainWhat my final year capstone actually taught me about shipping real software
Shahzaib Sajid·1d agoWhat Mentoring Junior Analysts Taught Me About My Own Detection RulesThe questions you cannot answer are the ones you need to fix
Shahzaib Sajid·2d agoWhat Mentoring Junior Analysts Taught Me About My Own Detection RulesThe questions you cannot answer are the ones you need to fixA response icon1A response icon1
Shahzaib Sajid·3d agoThe Internship That Taught Me Less Than I ExpectedAnd why that turned out to be the most useful lesson of all
Shahzaib Sajid·4d agoThe Detection I Almost DeletedA short story about context, trust, and why tuning is not the same as silencing
Shahzaib Sajid·Nov 5What a DDoS Attack Taught Me About Reading CloudsLessons from Cloudflare Network Analytics, VPC Flow Logs, and one very loud afternoon
Shahzaib Sajid·Nov 4The 60-70% False Positive Cut Wasn’t a Magic RuleWhat I learned about detection engineering after months of tuning SIEM alerts in an MSSP SOC
Shahzaib Sajid·Nov 3The Alert That Came From a Server That Does Not ExistOur asset inventory says we have four hundred and twelve servers. The alert came from number four hundred and thirteen. A hostname that was…
Shahzaib Sajid·Nov 2The Detection Rule That Caught Nothing For Eight Months and Was Still Our Best RuleWe had a rule that never fired. Eight months. Zero alerts. Every tuning review someone would bring it up. Kill it. It is dead weight. It is…
Shahzaib Sajid·Oct 30I Found a Fake Chrome Update Page on a Client’s Website and It Led Me Down a Rabbit HoleWhat started as a routine site visit turned into a full malware investigation
