Alex Teixeira – Medium

Alex Teixeira
in
Detect FYI

What makes up a solid SIEM query?

After writing and peer-reviewing numerous SIEM searches, here I share some tips to help others enhance their query-foo.

9 min read6 days ago

--

What makes up a solid SIEM query?

--

Alex Teixeira
in
Detect FYI

AI-Powered SOC: it's the end of the Alert Fatigue as we know it?

If you’ve ever worked in an enterprise SOC, you’ve probably heard it before:

6 min readApr 2, 2024

--

1

AI-Powered SOC: it's the end of the Alert Fatigue as we know it?

--

1

Alex Teixeira
in
Detect FYI

Boost your Security Monitoring reports with Sankey Diagrams

The Pie Chart is perhaps the most prevalent data visualization type seen in security reports out there. It's easy to implement and…

4 min readMar 18, 2024

--

Boost your Security Monitoring reports with Sankey Diagrams

--

Alex Teixeira
in
Detect FYI

Unsupervised Machine Learning with Splunk: the cluster command

If you are in cyber for long, you should have probably heard this one:

7 min readFeb 19, 2024

--

Unsupervised Machine Learning with Splunk: the cluster command

--

Alex Teixeira

Splunk ES Correlation Searches (Rules) Best & Cool Practices

The following document is by far the top accessed resource from my solo business website. Since its first release in late 2020 I’ve…

1 min readJan 15, 2024

--

1

Splunk ES Correlation Searches (Rules) Best & Cool Practices

--

1

Alex Teixeira
in
Detect FYI

Under the Radar: Your Detections are missing logs — every single run

In case you've been developing custom detection content for a while, you likely know what is one of the most critical steps during the…

7 min readJan 9, 2024

--

3

Under the Radar: Your Detections are missing logs — every single run

--

3

Alex Teixeira
in
Detect FYI

Beyond IOCs: Contextualized Leads from Analytics-Driven Threat Hunts

Much is said about hunting hypothesis. How that looks like in practice?

8 min readNov 5, 2023

--

Beyond IOCs: Contextualized Leads from Analytics-Driven Threat Hunts

--

Alex Teixeira
in
Detect FYI

Navigating the crossroads of Threat Hunting & Detection Engineering

It's not hard to guess that just a few enterprise organizations today have the luxury of having both #ThreatHunting and…

5 min readOct 31, 2023

--

1

Navigating the crossroads of Threat Hunting & Detection Engineering

--

1

Alex Teixeira
in
Detect FYI

Why you need Data Engineering Pipelines before an enterprise SIEM

By this time you've probably heard "Data is the new oil," right? So why are still so many detection engineers dealing with log data in its…

4 min readOct 17, 2023

--

1

Why you need Data Engineering Pipelines before an enterprise SIEM

--

1

Alex Teixeira
in
Detect FYI

My Top 5 Splunk dashboarding tips nobody talks about, but you will!

The idea is to explore a few simple steps of the workflow I often use when developing Splunk dashboards that I'm sure others can benefit.

5 min readSep 8, 2023

--

2

My Top 5 Splunk dashboarding tips nobody talks about, but you will!

--

2

Alex Teixeira

Alex Teixeira

I design and build threat detection and triage/hunting SIEM/EDR/XDR content for Enterprise #SecOps teams #DetectionEngineering http://opstune.com

Help
Status
About
Careers
Blog
Privacy
Terms
Text to speech
Teams