{"id":13,"date":"2020-09-24T10:31:59","date_gmt":"2020-09-24T10:31:59","guid":{"rendered":"https:\/\/arter-demo.bslthemes.com\/?page_id=13"},"modified":"2025-09-30T13:19:06","modified_gmt":"2025-09-30T13:19:06","slug":"home","status":"publish","type":"page","link":"https:\/\/logsmith.io\/","title":{"rendered":"Home"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\n\t\t
\n\t\t\t\n\t\t\t
\n\t\t\t \n\t\t\t
\n\n\t\t\t \n\t\t\t
\n\t\t\t \n\t\t\t
<\/div>\n\t\t\t \n\t\t\t
<\/div>\n\t\t\t \n\t\t\t
\n\t\t\t \n\t\t\t
\n\t\t\t \t\t\t \n\t\t\t

\n\t\t\t \n\t\t\t \tTurning noisy data into
clear insight\t\t\t <\/span>\n\t\t\t <\/h1>\n\t\t\t \t \t\t\t \t \t\t\t \n\t\t\t
\n\t\t\t \t<code<\/i>>\t\t\t \tI build\t\t\t \t\t\t\t \t<\/span>\n\t\t\t \t\t\t <\/code<\/i>>\t\t\t <\/div>\n\t\t\t \t\t\t \t\t\t\t\t \t\t\t <\/div>\n\t\t\t \n\t\t\t \t\t\t \n\t\t\t \"Photo\"\n\t\t\t \t\t\t <\/div>\n\t\t\t \n\t\t\t <\/div>\n\t\t\t \n\n\t\t\t <\/div>\n\t\t\t \n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\n\t\t
\n\n\t\t\t\t\n\t\t
\n\t\t \t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \n\t\t \n\t\t \t\n\t\t \t\t10\t\t \t<\/span>\n\t\t <\/span>\n\t\t \t\t +<\/span>\n\t\t \t\t\t <\/div>\n\t\t \n\t\t \n\t\t
\n\t\t \t\n\t \t\tYears Experience\t \t<\/span>\n\t\t <\/h6>\n\t\t <\/div>\n\t\t \n\n\t\t <\/div>\n\t\t \n\t\t \t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \n\t\t \n\t\t \t\n\t\t \t\t20\t\t \t<\/span>\n\t\t <\/span>\n\t\t \t\t +<\/span>\n\t\t \t\t\t <\/div>\n\t\t \n\t\t \n\t\t
\n\t\t \t\n\t \t\tProjects Finished\t \t<\/span>\n\t\t <\/h6>\n\t\t <\/div>\n\t\t \n\n\t\t <\/div>\n\t\t \n\t\t \t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \n\t\t \n\t\t \t\n\t\t \t\t50\t\t \t<\/span>\n\t\t <\/span>\n\t\t \t\t <\/div>\n\t\t \n\t\t \n\t\t
\n\t\t \t\n\t \t\tHappy Customers\t \t<\/span>\n\t\t <\/h6>\n\t\t <\/div>\n\t\t \n\n\t\t <\/div>\n\t\t \n\t\t \t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \n\t\t \n\t\t \t\n\t\t \t\t0\t\t \t<\/span>\n\t\t <\/span>\n\t\t \t\t <\/div>\n\t\t \n\t\t \n\t\t
\n\t\t \t\n\t \t\tTrouble\t \t<\/span>\n\t\t <\/h6>\n\t\t <\/div>\n\t\t \n\n\t\t <\/div>\n\t\t \n\t\t \t\t<\/div>\n\t\t\n\t\t\n\t\t<\/div>\n\t\t\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Meet LogSmith<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

I\u2019m Steven \u2014 a log specialist, detection engineer, and trusted freelance partner to security teams who need clarity in the chaos.<\/p>

I\u2019ve spent 15+ years working across SIEM platforms, from Splunk to LogScale, helping government, defence, and private sector clients clean up their pipelines, fix what\u2019s broken, and build trust in their alerts again.<\/p>

What sets me apart? I don\u2019t just write rules \u2014 I engineer the whole system around them. That means getting your logs clean, your extractions right, and your detection logic tight. No fluff, no noise \u2014 just the outcomes that matter.<\/p>

UK-based. SC cleared. Ready to plug in.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\n\t\t
\n\n\t\t\n\t\t
\n\t\t \t\t \n\t\t
\n\n\t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \n\t\t

\n\t\t \t\n\t\t \tWhy teams bring me in\t\t <\/span>\n\t\t \t<\/h2>\n\t\t <\/div>\n\t\t \n\t\t <\/div>\n\t\t \n\n\t\t <\/div>\n\t\t \n\t\t \n\t\t \t\t \t\t \n\t\t
\n\n\t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \t\t \n\t\t
\n\t\t \t\n\t\t \t\tI cut through SIEM noise\t\t \t<\/span>\n\t\t <\/h5>\n\t\t \t\t \t\t \n\t\t
\n\t\t \t
\n\t\t \t\t

You don\u2019t need more alerts \u2014 you need better ones. I help teams reduce noise, suppress false positives, and focus on what actually matters.<\/p>\t\t \t<\/div>\n\t\t <\/div>\n\t\t \t\t \t\t <\/div>\n\t\t \n\t\t <\/div>\n\t\t \n\n\t\t <\/div>\n\t\t \n\t\t \t\t \n\t\t

\n\n\t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \t\t \n\t\t
\n\t\t \t\n\t\t \t\tI clean your logs at the source\t\t \t<\/span>\n\t\t <\/h5>\n\t\t \t\t \t\t \n\t\t
\n\t\t \t
\n\t\t \t\t

Messy fields cause weak detections. I fix your parsers, clean up field extractions, and map everything to ECS or CIM.<\/p>\t\t \t<\/div>\n\t\t <\/div>\n\t\t \t\t \t\t <\/div>\n\t\t \n\t\t <\/div>\n\t\t \n\n\t\t <\/div>\n\t\t \n\t\t \t\t \n\t\t

\n\n\t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \t\t \n\t\t
\n\t\t \t\n\t\t \t\tI work across your whole toolset\t\t \t<\/span>\n\t\t <\/h5>\n\t\t \t\t \t\t \n\t\t
\n\t\t \t
\n\t\t \t\t

Splunk, LogScale, syslog, Cribl \u2014 I adapt quickly and fit into your existing workflow without friction.<\/p>\t\t \t<\/div>\n\t\t <\/div>\n\t\t \t\t \t\t <\/div>\n\t\t \n\t\t <\/div>\n\t\t \n\n\t\t <\/div>\n\t\t \n\t\t \t\t \n\t\t

\n\n\t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \t\t \n\t\t
\n\t\t \t\n\t\t \t\tI align detection to real-world threats\t\t \t<\/span>\n\t\t <\/h5>\n\t\t \t\t \t\t \n\t\t
\n\t\t \t
\n\t\t \t\t

I help clients map detection to frameworks like MITRE ATT&CK, NIST, and industry-specific threat models \u2014 so your rules are more than just logic; they\u2019re risk-aligned, testable, and strategically sound.<\/p>\t\t \t<\/div>\n\t\t <\/div>\n\t\t \t\t \t\t <\/div>\n\t\t \n\t\t <\/div>\n\t\t \n\n\t\t <\/div>\n\t\t \n\t\t \t\t \n\t\t

\n\n\t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \t\t \n\t\t
\n\t\t \t\n\t\t \t\tI understand the whole detection pipeline\t\t \t<\/span>\n\t\t <\/h5>\n\t\t \t\t \t\t \n\t\t
\n\t\t \t
\n\t\t \t\t

Good detection isn\u2019t just about SIEM rules \u2014 it\u2019s about knowing what data\u2019s coming in, how it\u2019s parsed, enriched, normalised, triggered, escalated, and surfaced. I work across the full stack to make sure every stage supports the signal, not the noise.<\/p>\t\t \t<\/div>\n\t\t <\/div>\n\t\t \t\t \t\t <\/div>\n\t\t \n\t\t <\/div>\n\t\t \n\n\t\t <\/div>\n\t\t \n\t\t \t\t \n\t\t

\n\n\t\t \n\t\t
\n\t\t \n\t\t
\n\t\t \t\t \n\t\t
\n\t\t \t\n\t\t \t\tI\u2019m SC cleared and delivery-ready\t\t \t<\/span>\n\t\t <\/h5>\n\t\t \t\t \t\t \n\t\t
\n\t\t \t
\n\t\t \t\t

UK-based, SC-cleared, and used to Gov, Defence, and enterprise security work. I onboard fast and deliver with minimal handholding.<\/p>\t\t \t<\/div>\n\t\t <\/div>\n\t\t \t\t \t\t <\/div>\n\t\t \n\t\t <\/div>\n\t\t \n\n\t\t <\/div>\n\t\t \n\t\t \t\t \t\t<\/div>\n\t\t\n\n\t\t<\/div>\n\t\t\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Build insight, not noise<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Whether it’s parser issues, broken field mappings, or alert overload \u2014 I help clean the pipeline so your team can focus on real threats.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t<\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\tTalk to me <\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\u201cAlert fatigue is a design problem. Detection should feel clean, not chaotic.\u201d<\/strong>
\u2014 My philosophy after seeing too many SOC teams burn out on bad logic.<\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Let's talk logs<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Whether you\u2019ve got broken extractions, noisy alerts, or detection rules you don\u2019t trust \u2014 I\u2019m here to help. I take on freelance and short-term contract work across the UK and beyond.<\/p>

I\u2019m UK-based, SC-cleared, and comfortable dropping into fast-moving teams or solo projects.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t<\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\tConnect <\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Turning noisy data into clear insight <code> I build <\/code> 10 + Years Experience 20 + Projects Finished 50 Happy… <\/p>\n

Read more<\/a><\/div>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"template-layout-builder.php","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"iawp_total_views":94,"footnotes":""},"class_list":["post-13","page","type-page","status-publish","hentry"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/logsmith.io\/index.php\/wp-json\/wp\/v2\/pages\/13","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/logsmith.io\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/logsmith.io\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/logsmith.io\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/logsmith.io\/index.php\/wp-json\/wp\/v2\/comments?post=13"}],"version-history":[{"count":5,"href":"https:\/\/logsmith.io\/index.php\/wp-json\/wp\/v2\/pages\/13\/revisions"}],"predecessor-version":[{"id":318,"href":"https:\/\/logsmith.io\/index.php\/wp-json\/wp\/v2\/pages\/13\/revisions\/318"}],"wp:attachment":[{"href":"https:\/\/logsmith.io\/index.php\/wp-json\/wp\/v2\/media?parent=13"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}