Detection Engineering 5
- Hunting What the Alerts Missed: Threat Hunting Sysmon in Splunk
- Atomic Red Team vs. My Splunk Detections: What Actually Fired
- Same Detection, Two Languages: Writing My Splunk Detections in KQL
- Which Logs Are Worth the License? Measuring What Each Windows Source Costs in Splunk
- Onboarding a Windows Client to Splunk: Deployment Server, Universal Forwarder, and the Gotchas Nobody Mentions