Going Beyond the Cosmetics to Assess Detection Quality

First published on jonschipp.com.

How I’m building a small-scale SOC lab using Wazuh, Zeek to explore alert correlation

SMB Relay Attack

This is my first Medium post.

In a modern security defense stack, Detection Engineering is a critical capability. For many new security analysts, writing detection rules…

Nuclei Templates as Detection Engineering, across pentest and threat-model assumptions

Why modern security fails silently — and how building better detections actually changes outcomes.

Detection Logic Bugs exist everywhere. Practitioners are starting to wake up. Vendor “100% Coverage” claims have a fallacy that leaves you…

This is my walkthrough for SigHunt, a premium room from TryHackMe, part of the Detection Engineering module and SOC Level 2 learning path.