https://ne0tw0.pt/posts/Recent content in Posts on Hugo MirandaHugoen-usFri, 08 May 2026 00:00:00 +0000https://ne0tw0.pt/posts/welcome/Fri, 08 May 2026 00:00:00 +0000https://ne0tw0.pt/posts/welcome/<p>This site will host detection-engineering writeups, investigation notes, and notes from operating SIEM platforms in regulated environments.</p> <p>planned topics:</p> <ul> <li>SIGMA rule engineering and detection-as-code workflows</li> <li>IBM QRadar internals: AQL, DSMs, Custom Rule Engine tuning</li> <li>Microsoft Sentinel and KQL for hunting and correlation</li> <li>sanitized incident response writeups from real investigations</li> <li>log source onboarding patterns at scale</li> <li>NIS2 and DORA detection requirements in practice</li> </ul> <p>more to come.</p>