I Built a Self-Hosted Threat Intelligence Platform to Stop Tab-Hopping Forever
A few months ago I was triaging a suspicious IP and caught myself with VirusTotal, AbuseIPDB, Shodan, and OTX all open at once, reconciling …
Elmer Phillips | Security Analyst
Blue Team Operations | SIEM | EDR | Managed Detection & Response
elmer@soc ~ /detections
Professional Summary
Security Analyst with 4+ years of MDR experience.
- Blue Team Operations & Defense
- SIEM & EDR Platform Mastery
- Detection Engineering & Threat Hunting
- Pragmatic Incident Response
Featured Blog Posts
Building a Security-Focused Homelab: Lessons from Week One
Starting my homelab journey has been more rewarding than I expected. After researching budget options, I settled on a Dell OptiPlex 7070 …
Active Node.js Malware Campaign Targeting Manual Reader Applications
We’re seeing a significant uptick in a malware campaign that’s affecting multiple customers. This one’s worth knowing …
Core Competencies
Blue Team Operations
- Defensive playbooks
- SOC workflows
SIEM Platforms
- Splunk, Microsoft Sentinel, Chronicle
EDR Solutions
- SentinelOne, CrowdStrike, Defender
Threat Intel & Hunting
- OSINT enrichment, hunt hypotheses
Detection Eng. & IR
- Rule tuning, incident response