The LogSmith Playbook

What You’ll Learn

Part I – The Forge

• Detection philosophy
• Data ingest
• Normalisation
• Data models

Part II – The Craft

• Detection lifecycle
• Correlation rules
• False positives
• Risk-based alerting
• Signal quality

Part III – The Machine

• Git-First SIEM
• Machine learning
• Automation
• AI
• Agentic threats
• Future of SIEM

Part IV – The Mind of the LogSmith

• Lessons from the forge
• The Manifesto

Who It’s For

• Detection Engineers
• SOC Leads
• Security Architects
• Splunk Engineers
• LogScale Engineers
• SIEM Consultants