How to Establish Your First Threat Intelligence Program (Strategic)It is my belief that the majority of security practitioners understand Cyber Threat Intelligence (CTI) to be far more expansive than merely…Jul 7, 2024Jul 7, 2024
How to Determine the Urgency of a Security Alert in a Structured WayIn Splunk Enterprise Security (ES), security alerts are referred to as Notable Events. These notable events are stored in a dedicated…Jun 20, 2024Jun 20, 2024
Key Metrics for Evaluating Log UtilisationAs a Cyber Security Operations (SecOps) specialist, one query that often comes up from management is: “How well are we utilising the logs…Jun 15, 2024Jun 15, 2024
Getting Started: Sharing My Practical Experiences and Insights to Operationalise SecOps FrameworksWhile there are numerous frameworks and standards available in the SecOps (Security Operations) field, the industry often lacks practical…May 26, 2024May 26, 2024