now

Last updated 2026-08-27.

Working detection engineering and log pipeline problems across a multi-tenant SOC — mostly FortiGate, rsyslog, and Splunk right now, with Entra ID sign-in and consent-grant detections in the mix.

Outside of that: getting more comfortable in C, and picking up German.

• posts
• uses