Selected SOC engagement
Automated playbooks and response triggers helped suppress noisy alerts and surface high-fidelity, actionable signals. The work connected alert handling to the actions analysts needed to take.
Network Detection & Threat Investigation
Less alert noise.
More useful evidence.
Improve what defenders can see and investigate. Secure Data Solutions assesses telemetry, implements and tunes detections, and hands over workflows your analysts can operate.
Discuss your projectDetection platforms
Corelight · Zeek · Suricata
Investigation & enrichment: packet analysis · MISP · vulnerability data · Python/API workflows
From noisy alerts to actionable signals
What we help you do
Detection engineering
Zeek, Suricata and Corelight configuration, sensor placement, rule tuning and logging integration.
Investigation workflows
Packet analysis, vulnerability and MISP enrichment, focused hunts and custom Python/API investigation tools.
Analyst handoff
Operating procedures, training and custom SOC dashboards. AI-assisted analysis can support Zeek workflows; engineers review the results.
Selected career experience
Making network evidence usable for SOC analysts
Selected career experience includes onboarding Corelight Investigator customers, verifying initial operation and collecting network evidence for analysis. The work included tuning Suricata detections, enriching Zeek logs with vulnerability data and MISP intelligence, and training analysts to investigate findings.
Bring us the difficult one.
Tell us what needs to work better.