Technical note7 min read
Making Threat Intelligence useful for a SOC
Why indicators without context create noise, and how to build a workflow from enrichment to feedback.
CTISOCSIEM
02 / WRITING
Technical writing.
Independent original notes prepared for this site. Not Securelist publications or employer reports.
Technical note6 min read
XDR in OT: constraints before products
Visibility, production impact, SOC needs and acceptance criteria should come before tool selection.
XDROTNDR
Technical note6 min read
Designing a cyber range that teaches investigation
CTF exercises are stronger when learners observe the event chain, form hypotheses and support conclusions with evidence.
Cyber RangeCTFDFIR
Content provenance
Professional facts are based on the site owner’s résumé updated 18 September 2026. Case studies are anonymized; individual metrics are self-reported, not independently audited.