SIEM & Detection

Series

SIEM & Detection

SIEM platforms and detection patterns: Splunk SPL, Elastic Stack with KQL, investigation patterns, brute-force and C2 hunting techniques.

Splunk for Blue Team: SPL Queries and Investigation Patterns
Architecture, essential SPL commands, and real investigation patterns from a SOC perspective
May 4, 20266 min read5
Elastic SIEM and KQL: The Open-Source Alternative to Splunk
Architecture, ECS, KQL queries, and Kibana investigation patterns for blue team work
May 7, 20266 min read14