Siem skills

Hunting for Living-off-the-Land Binaries

mukul975

Proactively detect malicious use of trusted system binaries.

Building Detection Rules with Splunk SPL

mukul975

Create effective security detection rules in Splunk.

Performing Alert Triage with Elastic SIEM

mukul975

Streamline alert triage processes in Elastic Security.

Implementing Security Monitoring with Datadog

mukul975

Set up comprehensive security monitoring for cloud infrastructure.

Detecting Lateral Movement in Network

mukul975

Identify lateral movement techniques in enterprise networks.

Building Detection Rules with Sigma

mukul975

Create portable detection rules for SIEM platforms.

Analyzing Security Logs with Splunk

mukul975

Streamline security incident investigations with Splunk.

Implementing SIEM Use Cases

mukul975

Enhance SIEM detection with structured use case implementation.

Correlating Security Events in QRadar

mukul975

Enhance threat detection in IBM QRadar SIEM.

Detecting Lateral Movement with Splunk

mukul975

Hunt for adversary lateral movement using Splunk.

Hunting for Windows Persistence

mukul975

Identify and analyze persistence mechanisms on Windows systems.

SIEM Correlation Rules for APT

mukul975

Detect advanced persistent threats with multi-event correlation.

Log Forwarding with Fluentd

mukul975

Centralized log collection and routing made easy.

SIEM Use Case Tuning

mukul975

Reduce alert fatigue in your SIEM environment.