Writing
Notes from the field: detection engineering, AI in the SOC, and building trustworthy systems.
IR-Bridge: a lean IR triage tool I built for myself
A build-in-public project: a markdown-first IR triage tool where the unit of work is a detection and an agent does the investigative legwork. Built on my own time, on synthetic data.
The Spark, a parsing problem that wouldn't stay small
Why I built my detection parser as a deterministic skill instead of a prompt. Known input, known output, no drift.
Starting a dev blog
What this blog is about: detection engineering, rebuilding SOC triage from first principles, and Periheliax, the platform I'm building for the agentic era.