Skip to main content
ND

Author

Nicole Dobrovolskyy

Marketing, SOCSimulator

Nicole researches and structures SOCSimulator's blog guides and product announcements, from SOC playbook templates and the differences between EDR, antivirus and XDR to the launch of the KQL Query tab. Nicole also looks after how each post is found in search, so the answer an analyst needs is the one they actually find.

LinkedIn

Articles by Nicole Dobrovolskyy

Three panels of copper, a night-side Earth with city lights, and white marble above the words Now you can query.

Product Updates

Introducing the SOCSimulator Query Tab: Practice KQL in Your Browser

Practice KQL against the logs of a real operation: Windows, Linux and macOS data, nothing to set up. What it does and its limits.

Nicole Dobrovolskyy6 min read
Abstract dark diagram of many dim branching paths with one amber route traced unbroken from left to right

Best Practices

SOC Playbook Template: Steps, Queries and Thresholds

Copy this SOC playbook template: triggers, steps, SPL/KQL/Lucene queries and branch thresholds for one alert type, with two filled-in examples.

Nicole Dobrovolskyy23 min read