Detection at Scale

Home
Notes
Spotify
Archive
About
An Introduction to Cyber Threat Intelligence (CTI)
Effectively using IoCs and TTPs in SIEM for the highest-quality alerts and response context.
 • 
Jack Naglieri
The Sisense Breach Quick Hits
What happened, who's affected, and how to remediate.
 • 
Jack Naglieri
5 SIEM Capabilities for Detection Engineering
Tips for evaluating Detection as Code, Data Pipelines, APIs, and more...
 • 
Jack Naglieri
Improving Security Data Lake Efficiency with Log Filtering
The problem with unfiltered data, the power of log filtering, practical techniques, and benefits.
 • 
Jack Naglieri
The xz-utils Backdoor Quick Hits
With tips on how to detect the vulnerable version running in production.
 • 
Jack Naglieri
Unraveling SIEM Correlation Techniques
This post will explain correlation rules, elaborate on the techniques, and equip you to utilize their potential for building high-quality signals.
 • 
Jack Naglieri

February 2024

October 2023

The Transition from Monolithic SIEMs to Data Lakes for Security Monitoring
The nuance of data backends to support detection at scale.
 • 
Jack Naglieri

December 2022

Zero False Positives from your SIEM
Is it possible?
 • 
Jack Naglieri

September 2022

Five Lessons From Detection & Response Leaders
via the Detection at Scale podcast
 • 
Jack Naglieri

July 2022

Think Like a Detection Engineer, Pt. 2: Rule Writing
Writing effective, tested, and actionable rules!
 • 
Jack Naglieri
2
Think Like a Detection Engineer, Pt. 1: Logging
Instrumenting our security data
 • 
Jack Naglieri
© 2024 Jack Naglieri
Privacy ∙ Terms ∙ Collection notice
Start WritingGet the app
Substack is the home for great culture