Reading SIEM timelines without dashboard fixation
Why analysts who narrate field meaning first avoid noisy panels that hide assumptions.
Field notes
Short essays we assign as optional reading inside cohorts—published here for alumni who want a refresher.
Notebook discipline for alert fatigue seasons
Lightweight notebooks keep triage humane when volumes spike during releases.
Customer updates that respect unknowns
Language choices during incidents protect trust more than speed metaphors ever will.
Portfolio pages hiring panels actually scroll through
Structure beats ornament: ordering artifacts the way interview stories unfold.
Teaching hunt hypotheses without encouraging recklessness
Hypothesis cards channel curiosity into bounded work that operations teams can approve.