Tag: Log Normalisation
October 16, 2025
/ Case Study
When CIM Mapping Goes Sideways: Lessons from a Broken Detection
🔎 Introduction Everything looked good on paper:✅ The detection rule was written.✅ The sourcetype was CIM-mapped.✅ The data model was…
October 6, 2025
/ Case Study
Case Study : Taming the 21,000-Alert-a-Day SIEM
How I helped restore clarity and control to a chaotic Splunk ES environment