MONITOR PHASE
Detection & Response Engineering
Detection-as-code workflows with correlation rules mapped to MITRE ATT&CK techniques. Log pipeline architecture, alert tuning to reduce noise, and automated response playbooks using SOAR platforms.
Tools I use
SplunkMicrosoft SentinelElastic SIEMKQLSigma Rules