Incident response
Worked examples of real alert-to-case paths: what was noise, what wasn't, and how the evidence was assembled.
Field notes.
Insights on incident response, SOC operations, and Sentendra product updates.
Issue 00
Nothing published yet.
When we write, it will be about the unglamorous parts of response work: how queues get triaged, how cases get closed, and what we change in the product as a result.
Tell us what to write aboutPlanned topics
What you'll find here.
SOC operations
Shift handover, SLAs, MTTR that means something, and running many customers from one tenant.
Product notes
What changed in Sentendra, why it changed, and what it means for the people using it at 2am.