Extracting logs.......Please wait........

0 %
Steven Butterworth
Detection Engineer.
Noise Killer.
Log Tamer.
  • Base:
    United Kingdom
  • City:
    Manchester
  • Clients:
    Global
Splunk ES
LogScale
Detection Engineering
Alert Tuning
Parser Builds
OT/ICS Security
CRIBL
Use Case Dev
Data Normalisation
SIEM Architecture
Industrial Threat Detection
IT/OT Visibility
  • Vetted, Gov/Defence
  • Log Strategy
  • SIEM Strategy
  • DevSecOps Delivery

Insights

APT44: From Network Compromise to Industrial Disruption
October 27, 2026 / Case Study, Insights
APT44: From Network Compromise to Industrial Disruption

An examination of Sandworm, Industroyer2 and the challenges of detecting threats against industrial control systems. Introduction When we talk about…

The Cost of Crying Wolf: Why False Positives Are Killing Your SOC

Introduction It’s not the alerts you miss that break a SOC — it’s the thousands you never should have seen…

5 Signs Your SIEM Is Too Noisy

And what to do about it before your SOC burns out Your SIEM might look functional. It might be alerting….

Detection Is Broken Because Your Logs Are a Mess
Detection Is Broken Because Your Logs Are a Mess

Most of the time when a team says “our detection rules aren’t working,” it’s not the logic that’s broken —…

© 2026 LogSmith • SIEM Detection Engineering by Steven Butterworth
Email: steven@logsmith.io