I’m Elmer Phillips, a Security Analyst working in Managed Detection & Response at At-Bay. This blog is where I share practical notes from the SOC. Detection engineering, SIEM queries, threat hunting techniques, and lessons learned from 3 years of blue team work.
Security is a team sport. If these posts help you catch something faster or tune out some noise, that’s a win.
Best Practice
Focus on quality over quantity. A smaller set of high-signal detections beats dozens of noisy rules.