Tag

#siem

5 articles

Cyber Threat Hunting Tools: 13 SOC Analysts Use (2026)

Cyber threat hunting tools every SOC analyst needs: Sigma, YARA, KQL, Velociraptor, Wireshark, Zeek, MISP and more — grouped by layer with code examples.

Astrid LindqvistJun 3, 202615 min read

Tutorials

SIEM Use Cases: 10 Every SOC Runs (With Detection Logic)

SIEM use cases explained with detection logic sketches, data sources, and tuning notes for the 10 detections every SOC team operates.

Astrid LindqvistMay 31, 202614 min read

Best Practices

Best SIEM Tools in 2026: 10 Platforms Ranked

Best SIEM tools ranked for 2026: Splunk, Microsoft Sentinel, IBM QRadar, Elastic Security, and more — reviewed from a SOC analyst training perspective.

Astrid LindqvistMay 28, 202618 min read

Best Practices

Open Source SIEM Tools: 7 for Your Home Lab (2026)

Open source SIEM tools let you build real detection skills at zero cost. Here are 7 worth running in a home lab, ranked by what they actually teach.

Astrid LindqvistMay 23, 202614 min read

Tutorials

Windows Event IDs Cheat Sheet: The 31 That Matter

Windows event IDs cheat sheet for SOC analysts: 31 essential security event IDs covering auth, process execution, log tampering, and lateral movement.

Astrid LindqvistMay 14, 202614 min read