Results for “siem-integration”

Design, implement, test, and maintain SIEM detection rules mapped to MITRE ATT&CK across Splunk, Elastic, and Sentinel platforms.

Reduce SIEM alert fatigue by systematically tuning detection rules in Splunk and Elastic, using statistical baselines, whitelists, and precision/recall metrics.

Detect APT lateral movement by chaining Windows authentication events, process execution telemetry, and network connection logs across hosts using Splunk SPL and Sigma rule format.

Processes and analyzes multiple physiological signals (ECG, respiration, EDA, EMG, PPG, EOG) together using NeuroKit2, including cross-signal features like RSA and event-related analysis.