m
mrbanned

Adil E

@mrbanned

Elastic SIEM engineer: detection rules, log pipelines, dashboards

Marokko
Englisch, Arabisch, Französisch
Einige Informationen werden in englischer Sprache angezeigt.
Über mich
I'm a SOC and detection engineer working every day in a 24/7 multi-client SOC (retail and fintech on AWS). I deploy and administer Elastic Security and Wazuh, from a single node to a multi-node cluster, onboard log sources with ingest pipelines and ECS, write detection and correlation rules mapped to MITRE ATT&CK, and build Kibana dashboards with Lens, Vega and TSVB. As a SOC analyst I also run in-depth alert investigations. I recently audited 745+ detection rules to cut false positives. Documented, production-ready work in English, French and Arabic.... Mehr lesen

Kompetenzen

m
mrbanned
Adil E
offline • 
Durchschnittliche Antwortzeit: 1 Stunde

Meine Dienstleistungen

Server-Administration
I will set up elastic siem from single node to multi node production cluster
Daten-ETLs
I will onboard any log source into elastic siem with ingest pipelines and ecs